General
- Target 2026-07-20_d9a68da636d64ef66a778b14eabba025_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 1024KB
- Sample260720-vebdcsav3w
- SHA256 d0a9c89489da1fe2cf979f8f9d6ea3d26b0a217a58fe99fe746e1526a8e56131
- MD5 d9a68da636d64ef66a778b14eabba025
- SHA1 224b96ec0d096b96d13fede15fb526fb3f5dfa5e
- SHA512 d0967f44314038c0a063e22229985049ddb9795ed7aa60b12001ba61d643663f7ca2a8132aa9c5cc8412d69ccec89a6e130505b8ef3f4422435c25fc11f56b27
- SSDEEP 24576:/Y+ck70Trc18BSnLW2CRBKViu99LK1Rad6yZcT29fhducOq:ykQTAKYS/v6h3+1uhZcT2NnvOq
- TLSH T17D25222471C0C4B3E46B503544C9CA76AA76B072477E89DBBBED63E5AF203E163352C9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-20_d9a68da636d64ef66a778b14eabba025_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_d9a68da636d64ef66a778b14eabba025_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
snojan
C2
-
http://wecan.hasthe.technology/upload
Targets
-
- Target 2026-07-20_d9a68da636d64ef66a778b14eabba025_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 1024KB
- SHA256 d0a9c89489da1fe2cf979f8f9d6ea3d26b0a217a58fe99fe746e1526a8e56131
- MD5 d9a68da636d64ef66a778b14eabba025
- SHA1 224b96ec0d096b96d13fede15fb526fb3f5dfa5e
- SHA512 d0967f44314038c0a063e22229985049ddb9795ed7aa60b12001ba61d643663f7ca2a8132aa9c5cc8412d69ccec89a6e130505b8ef3f4422435c25fc11f56b27
- SSDEEP 24576:/Y+ck70Trc18BSnLW2CRBKViu99LK1Rad6yZcT29fhducOq:ykQTAKYS/v6h3+1uhZcT2NnvOq
- TLSH T17D25222471C0C4B3E46B503544C9CA76AA76B072477E89DBBBED63E5AF203E163352C9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
UPX dump on OEP (original entry point)