2026-06-02_2f35cea5dadf9ec067bc32c7b17e376b_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee

General

Target
2026-06-02_2f35cea5dadf9ec067bc32c7b17e376b_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
Size 2.0MB
Sample260602-sd9tesgt6v
SHA256 522e652d7179e0cb8d0c8dc26f6c402a35acd3abbcc0b8869fa5136779f42c96
MD5 2f35cea5dadf9ec067bc32c7b17e376b
SHA1 b7b937d88e2d36f0aa7d1a65a6e2d52a7021cb33
SHA512 7ca387e36f6a0fd33454c21d8c48d01e4e160b00aea4b548fc18778ba56ec2a7a0d3bbee0105b51d11dae56f0cc5af84bb9469402a059b85fc4e9a4b4ce99db2
SSDEEP 49152:GkTrAGnJnJdtFWi8IZeTa1l18z/kAEAPjUiqz/PcH5TMZFT6x0Cnk:GjGbLMIZeTar1+tPYLuMZFT6+Ck
TLSH
T116A5121E64CCC0B6F579633548C1CA37BABAB0365BA99ADB6B8977E15E103D113343C8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Custom signature

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
sample	UPX

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-06-02_2f35cea5dadf9ec067bc32c7b17e376b_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee

2026-06-02_2f35cea5dadf9ec067bc32c7b17e376b_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee

.exe 2.0MB

SHA256 522e652d7179e0cb8d0c8dc26f6c402a35acd3abbcc0b8869fa5136779f42c96
MD5 2f35cea5dadf9ec067bc32c7b17e376b
SHA1 b7b937d88e2d36f0aa7d1a65a6e2d52a7021cb33
SHA512 7ca387e36f6a0fd33454c21d8c48d01e4e160b00aea4b548fc18778ba56ec2a7a0d3bbee0105b51d11dae56f0cc5af84bb9469402a059b85fc4e9a4b4ce99db2
SSDEEP 49152:GkTrAGnJnJdtFWi8IZeTa1l18z/kAEAPjUiqz/PcH5TMZFT6x0Cnk:GjGbLMIZeTar1+tPYLuMZFT6+Ck
TLSH
T116A5121E64CCC0B6F579633548C1CA37BABAB0365BA99ADB6B8977E15E103D113343C8
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

5

Entry point

52527

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths