General
- Target 2026-07-27_6ab60334eff1dc5eb56b0dd6f02b2202_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 368KB
- Sample260727-ryn7sabe79
- SHA256 6e8d6164da9f609a29950e25c6a1443be2eb2da578d0600cdba2de518770eade
- MD5 6ab60334eff1dc5eb56b0dd6f02b2202
- SHA1 a939d8e75685e4d09531c80c5764a0c48c23920e
- SHA512 0a30eb1ce0ad94ed97c4e67efb782dbe141e99828736442711d7b71d64a5dc7edc9761ed7689e6e40b38ee0c072bbb98ba32d7b36d849dee4f0bb033e908d39b
- SSDEEP 6144:NrFZaaZmEJuFDKW1Lgbdl0TBBvjc/YVM66dAFlJTSRUYzLY6hOfvb2wh:/bE+u9h1Lk70TnvjcsMxdABSnLHOr26
- TLSH T1EE84F12071C0C1B2D4BB113544EACA769A76707207B9D5DBBBDC27BAAE113E163352CE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-27_6ab60334eff1dc5eb56b0dd6f02b2202_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-27_6ab60334eff1dc5eb56b0dd6f02b2202_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
snojan
C2
-
http://wecan.hasthe.technology/upload
Targets
-
- Target 2026-07-27_6ab60334eff1dc5eb56b0dd6f02b2202_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 368KB
- SHA256 6e8d6164da9f609a29950e25c6a1443be2eb2da578d0600cdba2de518770eade
- MD5 6ab60334eff1dc5eb56b0dd6f02b2202
- SHA1 a939d8e75685e4d09531c80c5764a0c48c23920e
- SHA512 0a30eb1ce0ad94ed97c4e67efb782dbe141e99828736442711d7b71d64a5dc7edc9761ed7689e6e40b38ee0c072bbb98ba32d7b36d849dee4f0bb033e908d39b
- SSDEEP 6144:NrFZaaZmEJuFDKW1Lgbdl0TBBvjc/YVM66dAFlJTSRUYzLY6hOfvb2wh:/bE+u9h1Lk70TnvjcsMxdABSnLHOr26
- TLSH T1EE84F12071C0C1B2D4BB113544EACA769A76707207B9D5DBBBDC27BAAE113E163352CE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
UPX dump on OEP (original entry point)