General
- Target 2026-07-16_03494e772d27bf2d2da78168c89d0162_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 576KB
- Sample260716-vncmsadx2s
- SHA256 621fabeba412f49338766059052b523a4a650f58d462d0fa9248f695a365352c
- MD5 03494e772d27bf2d2da78168c89d0162
- SHA1 76d839eba742f731ccad9167d044aa4134ba6581
- SHA512 152b8cb10d74cadd779d838d98621fe6d91bd8352f281fafea32b926de19e21602a0334bf8717d3842ac7462a88955f9c8ce5e85ca08af049ec383f3dad4dc70
- SSDEEP 12288:/bE+uNh1Lk70TnvjcsMxdABSnLHOr2fqRVnRj1wTV1:/Y+ik70Trc18BSnLW2CRBKV1
- TLSH T1E9C4022071C1C077D4BB013544E9CA769A7630B247B995DBBBDC67BAAF202E1A3352CD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-16_03494e772d27bf2d2da78168c89d0162_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-16_03494e772d27bf2d2da78168c89d0162_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
snojan
C2
-
http://wecan.hasthe.technology/upload
Targets
-
- Target 2026-07-16_03494e772d27bf2d2da78168c89d0162_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 576KB
- SHA256 621fabeba412f49338766059052b523a4a650f58d462d0fa9248f695a365352c
- MD5 03494e772d27bf2d2da78168c89d0162
- SHA1 76d839eba742f731ccad9167d044aa4134ba6581
- SHA512 152b8cb10d74cadd779d838d98621fe6d91bd8352f281fafea32b926de19e21602a0334bf8717d3842ac7462a88955f9c8ce5e85ca08af049ec383f3dad4dc70
- SSDEEP 12288:/bE+uNh1Lk70TnvjcsMxdABSnLHOr2fqRVnRj1wTV1:/Y+ik70Trc18BSnLW2CRBKV1
- TLSH T1E9C4022071C1C077D4BB013544E9CA769A7630B247B995DBBBDC67BAAF202E1A3352CD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
UPX dump on OEP (original entry point)