General
- Target 2026-05-03_12bbcb8a2e6b336393b8789d2ccdfc52_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 640KB
- Sample260503-df17qset7r
- SHA256 806494aef5ef6c061ba7ba32d45b9ceaa777fb7b69a134968af2a3ad1f2c09c7
- MD5 12bbcb8a2e6b336393b8789d2ccdfc52
- SHA1 4e7383b5edcd87ed7f576fe28df440a07555ce47
- SHA512 c7d1fd81e433c75ce2cb77f041162a818826fca91da84333ed59c2d9594af285e72e396099b79c197f2ea377e6b08d0d915bf11dca895763f22b4342fea7944e
- SSDEEP 12288:/bE+uJh1Lk70TnvjcsMxdABSnLHOr2fqRVnRj1wTVtYSqvu99LN:/Y++k70Trc18BSnLW2CRBKViu99LN
- TLSH T1C7D4122071C0C4B6D4BB113544EACA729A76307247B995DBBBDC67BA6F203E1A3352CD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-05-03_12bbcb8a2e6b336393b8789d2ccdfc52_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260130-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-03_12bbcb8a2e6b336393b8789d2ccdfc52_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win11-20260130-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
snojan
C2
-
http://wecan.hasthe.technology/upload
Targets
-
- Target 2026-05-03_12bbcb8a2e6b336393b8789d2ccdfc52_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 640KB
- SHA256 806494aef5ef6c061ba7ba32d45b9ceaa777fb7b69a134968af2a3ad1f2c09c7
- MD5 12bbcb8a2e6b336393b8789d2ccdfc52
- SHA1 4e7383b5edcd87ed7f576fe28df440a07555ce47
- SHA512 c7d1fd81e433c75ce2cb77f041162a818826fca91da84333ed59c2d9594af285e72e396099b79c197f2ea377e6b08d0d915bf11dca895763f22b4342fea7944e
- SSDEEP 12288:/bE+uJh1Lk70TnvjcsMxdABSnLHOr2fqRVnRj1wTVtYSqvu99LN:/Y++k70Trc18BSnLW2CRBKViu99LN
- TLSH T1C7D4122071C0C4B6D4BB113544EACA729A76307247B995DBBBDC67BA6F203E1A3352CD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
UPX dump on OEP (original entry point)