2026-10-22_43be52367f201821e6f0a46229281933_cosmicduke_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_tofsee_vidar

General

Target
2026-10-22_43be52367f201821e6f0a46229281933_cosmicduke_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_tofsee_vidar
Size 2.5MB
Sample261024-sebb9aav9y
SHA256 58b820953c8418e214471f5e902be716e72645b45c1e16bdd7e81f2630168f1d
MD5 43be52367f201821e6f0a46229281933
SHA1 12f9b69284af320533323e7d23051fdbfaaf1485
SHA512 7f581c129d9f250727670f7cee409e548d1b7f4695d27bfd741fef423973ed6bd6400310de5506880e42ef04c1b860cf81b546b7eba06020a40339fa09eb0779
SSDEEP 24576:3e6u/pjD3RS8lP2i4ZHf6Sppw56ElOj5MKOercI1Az4n6EMKt0h7+A2i:3OBjzYHCm+MFj5MB8cI4WihC9i
TLSH
T19DC512206F818072C52715B44EA0B7685A25BE9237E75DFF26C732B8CB34EC29E76315
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-22_43be52367f201821e6f0a46229281933_cosmicduke_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_tofsee_vidar

2026-10-22_43be52367f201821e6f0a46229281933_cosmicduke_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_tofsee_vidar

.exe 2.5MB

SHA256 58b820953c8418e214471f5e902be716e72645b45c1e16bdd7e81f2630168f1d
MD5 43be52367f201821e6f0a46229281933
SHA1 12f9b69284af320533323e7d23051fdbfaaf1485
SHA512 7f581c129d9f250727670f7cee409e548d1b7f4695d27bfd741fef423973ed6bd6400310de5506880e42ef04c1b860cf81b546b7eba06020a40339fa09eb0779
SSDEEP 24576:3e6u/pjD3RS8lP2i4ZHf6Sppw56ElOj5MKOercI1Az4n6EMKt0h7+A2i:3OBjzYHCm+MFj5MB8cI4WihC9i
TLSH
T19DC512206F818072C52715B44EA0B7685A25BE9237E75DFF26C732B8CB34EC29E76315
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

1

Major OS version

5

Entry point

35307

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths