Analysis
- max time kernel
0s - max time network
2s - platform
windows10-2004_x64 - resource
win10v2004-20260130-en - resource tags
arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
27/04/2026, 13:26
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-27_8fce01a5581eb04174ad1a25afe31f3d_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260130-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-27_8fce01a5581eb04174ad1a25afe31f3d_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win11-20260130-en
0 signatures
150 seconds
Errors
Reason
Payload did not run: image=C:\Users\Admin\AppData\Local\Temp\2026-04-27_8fce01a5581eb04174ad1a25afe31f3d_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
command="C:\Users\Admin\AppData\Local\Temp\2026-04-27_8fce01a5581eb04174ad1a25afe31f3d_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe"
wdir=C:\Users\Admin\AppData\Local\Temp
Payload error: %1 is not a valid Win32 application.
General
- Target 2026-04-27_8fce01a5581eb04174ad1a25afe31f3d_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
- Size 960KB
- Sample260427-qpr2msft3q
- SHA256 aa4777320d694f4b450a7591fd1dd43565bf4b34c29da1184b36f8eecc77d56c
- MD5 8fce01a5581eb04174ad1a25afe31f3d
- SHA1 ffc61fcd9e2f5989f4e960a22d9229108772b363
- SHA512 d402bfe65df5711f4739770229510d7a4a28fb5b171b7e6b6b397134485425bce1e33134b71e8e247fa62b3d42c2ed0997a47a5bd9a3b4bc4fb7ee9ebe1f0fd0
- SSDEEP 24576:yk70Trcg8BSnLW2CRBKViu99LK1Rad6yZcT29fhducOyY:ykQTA1YS/v6h3+1uhZcT2NnvOyY
- TLSH T17725122471C0C0B7E46A503644C9CF769A367472477A89DBBBD923F5AF203E1A3396C9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10