2026-08-20_58104cb28e29afb7482dc2cc929d177f_cosmicduke_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_tofsee_vidar

General

Target
2026-08-20_58104cb28e29afb7482dc2cc929d177f_cosmicduke_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_tofsee_vidar
Size 2.3MB
Sample260820-wfkh4awsay
SHA256 12283d0bed10900882273223baf2b9dc77d49615b263246eb455c10e7c63eeca
MD5 58104cb28e29afb7482dc2cc929d177f
SHA1 c4f5b90549a5ba43ae789c9c083ecaec18242088
SHA512 49e075788d2f9b351085d26d14a621af9f417fc0ae2d54fc42ec7dc0668b2a8da0bf4a8acfa53c65b1bbb8eb521173d6cd8a24983250d15c6c82785a31eafb03
SSDEEP 24576:3e6u/pjD3RSeXYBePtHyX+P5R8WMZHp4ZM5e69L1pRWmYyUKCehkMooe:3OBjzY20cHBop4ZQ19LFNBhdre
TLSH
T1C3B512206F818072C52715B44EA0B7685A29BE9237E74DFF16C732B8CB34EC29E76315
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-20_58104cb28e29afb7482dc2cc929d177f_cosmicduke_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_tofsee_vidar

2026-08-20_58104cb28e29afb7482dc2cc929d177f_cosmicduke_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_tofsee_vidar

.exe 2.3MB

SHA256 12283d0bed10900882273223baf2b9dc77d49615b263246eb455c10e7c63eeca
MD5 58104cb28e29afb7482dc2cc929d177f
SHA1 c4f5b90549a5ba43ae789c9c083ecaec18242088
SHA512 49e075788d2f9b351085d26d14a621af9f417fc0ae2d54fc42ec7dc0668b2a8da0bf4a8acfa53c65b1bbb8eb521173d6cd8a24983250d15c6c82785a31eafb03
SSDEEP 24576:3e6u/pjD3RSeXYBePtHyX+P5R8WMZHp4ZM5e69L1pRWmYyUKCehkMooe:3OBjzY20cHBop4ZQ19LFNBhdre
TLSH
T1C3B512206F818072C52715B44EA0B7685A29BE9237E74DFF16C732B8CB34EC29E76315
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

1

Major OS version

5

Entry point

35307

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths