2026-10-14_5ced309ab16d49c1c83e1f87176c3cc2_cosmicduke_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_tofsee_vidar
Classification: Malicious
2026-10-14_5ced309ab16d49c1c83e1f87176c3cc2_cosmicduke_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_tofsee_vidar is a malicious file sample.
Detection summary
- 0 antivirus detections
- 0 IDS alerts
- 0 processes observed
- 0 contacted hosts
- 0 DNS requests
MITRE ATT&CK associations
Malware families: COSMICDUKE (S0050)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Generic Malware | Cyber Threat Alliance | 2026-10-18 03:01:29 | 2026-10-18 03:01:29 | malicious-activity | |
| Cosmicduke | Cyber Threat Alliance | 2026-10-17 15:28:18 | 2026-10-17 15:28:18 | malicious-activity | S0050 CosmicDuke |
| Cosmicduke | Triage | 2026-10-14 20:49:09 | 2026-10-14 20:49:09 | malicious-activity | S0050 CosmicDuke |
Tags
cosmicduke apt29 apt collection defense_evasion discovery spyware stealerSample information
- Filenames
- 2026-10-14_5ced309ab16d49c1c83e1f87176c3cc2_cosmicduke_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_tofsee_vidar
- MD5
5ced309ab16d49c1c83e1f87176c3cc2- SHA-1
8a777f10212f9d796cfa994fbe5538841ee5c256- SHA-256
6255a592d679e5da2eb2eeb2c23e0dc220a232f5369ba4376bdfd7adc457a934- First indexed
- 2026-10-14 20:49:09
- Last updated
- 2026-10-14 20:49:09