General
- Target 2026-07-10_842a6e3ac53d4ffad1cef8b904aeb0a2_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 236KB
- Sample260710-mc71jsav4y
- SHA256 6b8be7590176b77e78d7c3f514e994e4b0a0f1cdba4c5859277f13592d6c357e
- MD5 842a6e3ac53d4ffad1cef8b904aeb0a2
- SHA1 fab8b64f66504596af1893122e88a219d7ccd4c2
- SHA512 4dc74814ec7dcdf8fd91bb72efecc34cc564d1ad6bdb9a472b274a529b9df76cb5ac9407ad1e5f7423c8a2d7c497470dffd228a381a578766cbbf0bcf6921e57
- SSDEEP 6144:yDKW1Lgbdl0TBBvjc/ELOhluWzsDjRFq2:Uh1Lk70Tnvjc9hluWzN2
- TLSH T1C534BF2571C0C1B3C476103445EACB798A797C610B6A92D7B69D3BBA6F313E1A3362CD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-10_842a6e3ac53d4ffad1cef8b904aeb0a2_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-10_842a6e3ac53d4ffad1cef8b904aeb0a2_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-10_842a6e3ac53d4ffad1cef8b904aeb0a2_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 236KB
- SHA256 6b8be7590176b77e78d7c3f514e994e4b0a0f1cdba4c5859277f13592d6c357e
- MD5 842a6e3ac53d4ffad1cef8b904aeb0a2
- SHA1 fab8b64f66504596af1893122e88a219d7ccd4c2
- SHA512 4dc74814ec7dcdf8fd91bb72efecc34cc564d1ad6bdb9a472b274a529b9df76cb5ac9407ad1e5f7423c8a2d7c497470dffd228a381a578766cbbf0bcf6921e57
- SSDEEP 6144:yDKW1Lgbdl0TBBvjc/ELOhluWzsDjRFq2:Uh1Lk70Tnvjc9hluWzN2
- TLSH T1C534BF2571C0C1B3C476103445EACB798A797C610B6A92D7B69D3BBA6F313E1A3362CD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables packed with unregistered version of .NET Reactor
-
.NET Reactor proctector
Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.