General
- Target 2026-07-12_6e0bc7754d7eb411556406c52752cb53_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 1.5MB
- Sample260712-p25mtsb16v
- SHA256 bfc5f1e9d53db5e751d6d4df1a54c79d61e3791cbacc38d916cbfa581bb3fb69
- MD5 6e0bc7754d7eb411556406c52752cb53
- SHA1 2e851cb64923ab2e7d2b65e49c1fb21c174a3c4a
- SHA512 a206184f4e39c7c68a77c6ae74e458e2bd0e0c1bd3bd1f5df6692ffa5a5f4a98440e4ebf4055d4b0458f48c9534a56f3faf8425e12e65dd6a2c06798ed9cf793
- SSDEEP 49152:ikQTAbE7ezuzHc7F5iC97XyHR8ChRRCLaI:iabE7e6z87FiHR9hHQaI
- TLSH T1EC7523203154FDF6C1B2243049B6C7B59E29E4B50B6891D7B98C2F6A6D242E3B7363CD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-12_6e0bc7754d7eb411556406c52752cb53_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-12_6e0bc7754d7eb411556406c52752cb53_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-12_6e0bc7754d7eb411556406c52752cb53_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 1.5MB
- SHA256 bfc5f1e9d53db5e751d6d4df1a54c79d61e3791cbacc38d916cbfa581bb3fb69
- MD5 6e0bc7754d7eb411556406c52752cb53
- SHA1 2e851cb64923ab2e7d2b65e49c1fb21c174a3c4a
- SHA512 a206184f4e39c7c68a77c6ae74e458e2bd0e0c1bd3bd1f5df6692ffa5a5f4a98440e4ebf4055d4b0458f48c9534a56f3faf8425e12e65dd6a2c06798ed9cf793
- SSDEEP 49152:ikQTAbE7ezuzHc7F5iC97XyHR8ChRRCLaI:iabE7e6z87FiHR9hHQaI
- TLSH T1EC7523203154FDF6C1B2243049B6C7B59E29E4B50B6891D7B98C2F6A6D242E3B7363CD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables packed with unregistered version of .NET Reactor
-
.NET Reactor proctector
Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.