2026-09-16_4f20c527d40f531604e9f7b98482e543_coinminer_cosmicduke_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_tofsee

General

Target
2026-09-16_4f20c527d40f531604e9f7b98482e543_coinminer_cosmicduke_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_tofsee
Size 2.0MB
Sample260916-1k216aef36
SHA256 43fb90468cb95c58562f18d4afaf62ce84cea4d79f460894a1609a4e748cb1bc
MD5 4f20c527d40f531604e9f7b98482e543
SHA1 71249d9e79c2d089d9498ffe3d1dc630fde5977a
SHA512 f4ba4e0387e154eee6aa8b7686f19e6c90fc88cea677c5f30dd265a1228630c092d77a9adace7c9962cd3377c6fd321953a3d5bdbb325decd9b9d721cd84dc5c
SSDEEP 12288:Re6TfPaGw/w+xoV8D3/5xg1tKwcwan8qJiKlh3CttP8eya2RZzFFCjqhlw:Re6u/O8D3RSZ0YKXytHy3Pf
TLSH
T1F5A5F13036C1C072D56722794AF5F7B84A5DB8A11BE1A9DF2BC907BD1F246D2833931A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

upx

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
sample	UPX

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-16_4f20c527d40f531604e9f7b98482e543_coinminer_cosmicduke_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_tofsee

2026-09-16_4f20c527d40f531604e9f7b98482e543_coinminer_cosmicduke_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_tofsee

.exe 2.0MB

SHA256 43fb90468cb95c58562f18d4afaf62ce84cea4d79f460894a1609a4e748cb1bc
MD5 4f20c527d40f531604e9f7b98482e543
SHA1 71249d9e79c2d089d9498ffe3d1dc630fde5977a
SHA512 f4ba4e0387e154eee6aa8b7686f19e6c90fc88cea677c5f30dd265a1228630c092d77a9adace7c9962cd3377c6fd321953a3d5bdbb325decd9b9d721cd84dc5c
SSDEEP 12288:Re6TfPaGw/w+xoV8D3/5xg1tKwcwan8qJiKlh3CttP8eya2RZzFFCjqhlw:Re6u/O8D3RSZ0YKXytHy3Pf
TLSH
T1F5A5F13036C1C072D56722794AF5F7B84A5DB8A11BE1A9DF2BC907BD1F246D2833931A
MD5 SHA1 SHA512 SSDEEP TLSH

UPX dump on OEP (original entry point)
UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

35307

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths