General

  • Target
    2026-07-11_85447898e31dca120bcef16641494275_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
  • Size 1.5MB
  • Sample260711-e1yssabv9k
  • SHA256 cfc61e3ba0b0e0ea4976ea77cfa4f96697008d7e73738fd99daf3d0cadf61c72
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10

Malware Config

Targets

    • Target
      2026-07-11_85447898e31dca120bcef16641494275_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
    • Size 1.5MB
    • SHA256 cfc61e3ba0b0e0ea4976ea77cfa4f96697008d7e73738fd99daf3d0cadf61c72
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    9/10
    • Detects executables packed with SmartAssembly

    • Detects executables packed with unregistered version of .NET Reactor

    • Detects executables referencing many base64-encoded IR and analysis tools names

    • .NET Reactor proctector

      Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.

    • SmartAssembly .NET packer

      Detects SmartAssembly .NET packer.

MITRE ATT&CK Enterprise v16

Tasks