General
- Target 2026-06-30_1485f53dc94b2539ded0d64b119e0a59_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 302KB
- Sample260701-aw59vac191
- SHA256 94c91cb8fbb8562331452c37a2ee2a7aca9cb39630095aa5e2f8799b8e161f3d
- MD5 1485f53dc94b2539ded0d64b119e0a59
- SHA1 15729c5facc4c92bb71fc624a136d4dd713dc479
- SHA512 20708972b0b558303071bcd8fa56b51b32958710c7cf7c4b2fd089f76efaf3c9c88ce5f08479e4b583ba1c464a7207477bccec020095e9378ad759a98e5ae782
- SSDEEP 6144:IDKW1LgbdlgTBBvjc/ZSjHQvsy0YWHPO:Oh1Lk7gTnvjcmy0bO
- TLSH T1B3648D1135B4CD72C4B6203F99968A254A2F28214BA5B5D7B78B27ED5F303D1B2372CB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-30_1485f53dc94b2539ded0d64b119e0a59_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-30_1485f53dc94b2539ded0d64b119e0a59_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260630-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-30_1485f53dc94b2539ded0d64b119e0a59_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 302KB
- SHA256 94c91cb8fbb8562331452c37a2ee2a7aca9cb39630095aa5e2f8799b8e161f3d
- MD5 1485f53dc94b2539ded0d64b119e0a59
- SHA1 15729c5facc4c92bb71fc624a136d4dd713dc479
- SHA512 20708972b0b558303071bcd8fa56b51b32958710c7cf7c4b2fd089f76efaf3c9c88ce5f08479e4b583ba1c464a7207477bccec020095e9378ad759a98e5ae782
- SSDEEP 6144:IDKW1LgbdlgTBBvjc/ZSjHQvsy0YWHPO:Oh1Lk7gTnvjcmy0bO
- TLSH T1B3648D1135B4CD72C4B6203F99968A254A2F28214BA5B5D7B78B27ED5F303D1B2372CB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.