Analysis
- max time kernel
148s - max time network
114s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260710-en - resource tags
- submitted
11/07/2026, 04:37
General
- Target 2026-07-11_51afea8e4e9eeb004167c073b7700077_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
- Size 382KB
- Sample260711-e86hladz5x
- SHA256 3cf998a7877ce2a58bdd0b217eea5e30de94ce9bd082a568112cedd6d5faf771
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-07-11_51afea8e4e9eeb004167c073b7700077_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe"C:\Users\Admin\AppData\Local\Temp\2026-07-11_51afea8e4e9eeb004167c073b7700077_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
memory/3596-0-0x0000000074F22000-0x0000000074F23000-memory.dmp
memory/3596-1-0x0000000004CC0000-0x0000000004D32000-memory.dmp
memory/3596-4-0x0000000005360000-0x00000000053D0000-memory.dmp
memory/3596-3-0x0000000004DA0000-0x000000000535A000-memory.dmp
memory/3596-2-0x0000000074F10000-0x00000000756CC000-memory.dmp
memory/3596-12-0x0000000005360000-0x00000000053CB000-memory.dmp
memory/3596-8-0x0000000005360000-0x00000000053CB000-memory.dmp
memory/3596-86-0x0000000005360000-0x00000000053CB000-memory.dmp
memory/3596-131-0x0000000005360000-0x00000000053CB000-memory.dmp
memory/3596-210-0x0000000074F10000-0x00000000756CC000-memory.dmp
memory/3596-129-0x0000000005360000-0x00000000053CB000-memory.dmp
memory/3596-127-0x0000000005360000-0x00000000053CB000-memory.dmp
memory/3596-125-0x0000000005360000-0x00000000053CB000-memory.dmp
memory/3596-123-0x0000000005360000-0x00000000053CB000-memory.dmp
memory/3596-121-0x0000000005360000-0x00000000053CB000-memory.dmp
memory/3596-119-0x0000000005360000-0x00000000053CB000-memory.dmp
memory/3596-117-0x0000000005360000-0x00000000053CB000-memory.dmp
memory/3596-115-0x0000000005360000-0x00000000053CB000-memory.dmp
memory/3596-113-0x0000000005360000-0x00000000053CB000-memory.dmp
memory/3596-111-0x0000000005360000-0x00000000053CB000-memory.dmp
memory/3596-109-0x0000000005360000-0x00000000053CB000-memory.dmp
memory/3596-107-0x0000000005360000-0x00000000053CB000-memory.dmp
memory/3596-105-0x0000000005360000-0x00000000053CB000-memory.dmp
memory/3596-103-0x0000000005360000-0x00000000053CB000-memory.dmp
memory/3596-101-0x0000000005360000-0x00000000053CB000-memory.dmp
memory/3596-100-0x0000000005360000-0x00000000053CB000-memory.dmp
memory/3596-97-0x0000000005360000-0x00000000053CB000-memory.dmp
memory/3596-95-0x0000000005360000-0x00000000053CB000-memory.dmp
memory/3596-93-0x0000000005360000-0x00000000053CB000-memory.dmp
memory/3596-91-0x0000000005360000-0x00000000053CB000-memory.dmp
memory/3596-90-0x0000000005360000-0x00000000053CB000-memory.dmp
memory/3596-84-0x0000000005360000-0x00000000053CB000-memory.dmp
memory/3596-80-0x0000000005360000-0x00000000053CB000-memory.dmp
memory/3596-78-0x0000000005360000-0x00000000053CB000-memory.dmp
memory/3596-76-0x0000000005360000-0x00000000053CB000-memory.dmp
memory/3596-74-0x0000000005360000-0x00000000053CB000-memory.dmp
memory/3596-72-0x0000000005360000-0x00000000053CB000-memory.dmp
memory/3596-68-0x0000000005360000-0x00000000053CB000-memory.dmp
memory/3596-66-0x0000000005360000-0x00000000053CB000-memory.dmp
memory/3596-64-0x0000000005360000-0x00000000053CB000-memory.dmp
memory/3596-60-0x0000000005360000-0x00000000053CB000-memory.dmp
memory/3596-59-0x0000000005360000-0x00000000053CB000-memory.dmp
memory/3596-54-0x0000000005360000-0x00000000053CB000-memory.dmp
memory/3596-52-0x0000000005360000-0x00000000053CB000-memory.dmp
memory/3596-48-0x0000000005360000-0x00000000053CB000-memory.dmp
memory/3596-46-0x0000000005360000-0x00000000053CB000-memory.dmp
memory/3596-38-0x0000000005360000-0x00000000053CB000-memory.dmp
memory/3596-36-0x0000000005360000-0x00000000053CB000-memory.dmp
memory/3596-34-0x0000000005360000-0x00000000053CB000-memory.dmp
memory/3596-30-0x0000000005360000-0x00000000053CB000-memory.dmp
memory/3596-28-0x0000000005360000-0x00000000053CB000-memory.dmp
memory/3596-25-0x0000000005360000-0x00000000053CB000-memory.dmp
memory/3596-22-0x0000000005360000-0x00000000053CB000-memory.dmp
memory/3596-18-0x0000000005360000-0x00000000053CB000-memory.dmp
memory/3596-16-0x0000000005360000-0x00000000053CB000-memory.dmp
memory/3596-14-0x0000000005360000-0x00000000053CB000-memory.dmp
memory/3596-6-0x0000000005360000-0x00000000053CB000-memory.dmp
memory/3596-5-0x0000000005360000-0x00000000053CB000-memory.dmp
memory/3596-88-0x0000000074F10000-0x00000000756CC000-memory.dmp
memory/3596-82-0x0000000005360000-0x00000000053CB000-memory.dmp
memory/3596-70-0x0000000005360000-0x00000000053CB000-memory.dmp
memory/3596-62-0x0000000005360000-0x00000000053CB000-memory.dmp
memory/3596-56-0x0000000005360000-0x00000000053CB000-memory.dmp
memory/3596-50-0x0000000005360000-0x00000000053CB000-memory.dmp
memory/3596-44-0x0000000005360000-0x00000000053CB000-memory.dmp
memory/3596-42-0x0000000005360000-0x00000000053CB000-memory.dmp
memory/3596-40-0x0000000005360000-0x00000000053CB000-memory.dmp
memory/3596-32-0x0000000005360000-0x00000000053CB000-memory.dmp
memory/3596-26-0x0000000005360000-0x00000000053CB000-memory.dmp
memory/3596-20-0x0000000005360000-0x00000000053CB000-memory.dmp
memory/3596-10-0x0000000005360000-0x00000000053CB000-memory.dmp
memory/3596-1833-0x0000000074F10000-0x00000000756CC000-memory.dmp
memory/3596-1834-0x00000000054D0000-0x000000000556C000-memory.dmp
memory/3596-1835-0x0000000074F22000-0x0000000074F23000-memory.dmp
memory/3596-1836-0x0000000074F10000-0x00000000756CC000-memory.dmp