General
- Target 2026-07-20_96469ec38d975a2158c823de2fc49a01_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 1.7MB
- Sample260720-jhp55sat6m
- SHA256 ad4a4e806010daa3745ab9a619490e741664db41678492dd2e02f6336d0c53a9
- MD5 96469ec38d975a2158c823de2fc49a01
- SHA1 e245f0bd7d89818759c1045ae6caa75cf15e9ea6
- SHA512 99231376c0b87516b0028bba58bd425816fd66e38c0dd9f0b772180d10baa2b8bf5acee988043c0cbba92b2b2510bac91cd590c7a6f61ec0924fd3f8351fb7a7
- SSDEEP 49152:ckQzAvIwMtuvMDVPG4JdXeR4aT6LQ+d3mY/4qxTsx3scC:c6FuRD9JdOR4m+lmY/4rx8cC
- TLSH T1088523097181D333C2FB003085C58FB55A2566224F7566EFFBE89B662F202F4BB665C9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-20_96469ec38d975a2158c823de2fc49a01_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_96469ec38d975a2158c823de2fc49a01_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_96469ec38d975a2158c823de2fc49a01_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 1.7MB
- SHA256 ad4a4e806010daa3745ab9a619490e741664db41678492dd2e02f6336d0c53a9
- MD5 96469ec38d975a2158c823de2fc49a01
- SHA1 e245f0bd7d89818759c1045ae6caa75cf15e9ea6
- SHA512 99231376c0b87516b0028bba58bd425816fd66e38c0dd9f0b772180d10baa2b8bf5acee988043c0cbba92b2b2510bac91cd590c7a6f61ec0924fd3f8351fb7a7
- SSDEEP 49152:ckQzAvIwMtuvMDVPG4JdXeR4aT6LQ+d3mY/4qxTsx3scC:c6FuRD9JdOR4m+lmY/4rx8cC
- TLSH T1088523097181D333C2FB003085C58FB55A2566224F7566EFFBE89B662F202F4BB665C9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Process spawned unexpected child process
This typically indicates the parent process was compromised via an exploit or macro.
-
Detects executables packed with SmartAssembly
-
SmartAssembly .NET packer
Detects SmartAssembly .NET packer.