General
- Target 2026-07-27_1c299571f0c1384b965fa50abf925595_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 496KB
- Sample260727-y3ebps1bne
- SHA256 7273919770809f586f7f94a3bcbf92d702202a72fd90bd9c1ad660346ff22932
- MD5 1c299571f0c1384b965fa50abf925595
- SHA1 90e46561518cd8bd4f24bb9c72035eaf9fa9800b
- SHA512 2c8243904155abebcbb5a6f051b5fbc32d6996aa02e0ae88d9caecde5282a392e15a4cee308e5041efb38fb1aab9135db06db9d55590d644dc12757ab53b81e3
- SSDEEP 12288:/bE+u3h1Lk70TnvjcsMxdABSnLHOr2fqRVnRjx:/Y+sk70Trc18BSnLW2CRBz
- TLSH T158B4022071C0C0B7D4BB113544E9CA369A76707147B9D5DBBAEC67BAAF202E163352CE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-27_1c299571f0c1384b965fa50abf925595_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-27_1c299571f0c1384b965fa50abf925595_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
snojan
C2
-
http://wecan.hasthe.technology/upload
Targets
-
- Target 2026-07-27_1c299571f0c1384b965fa50abf925595_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 496KB
- SHA256 7273919770809f586f7f94a3bcbf92d702202a72fd90bd9c1ad660346ff22932
- MD5 1c299571f0c1384b965fa50abf925595
- SHA1 90e46561518cd8bd4f24bb9c72035eaf9fa9800b
- SHA512 2c8243904155abebcbb5a6f051b5fbc32d6996aa02e0ae88d9caecde5282a392e15a4cee308e5041efb38fb1aab9135db06db9d55590d644dc12757ab53b81e3
- SSDEEP 12288:/bE+u3h1Lk70TnvjcsMxdABSnLHOr2fqRVnRjx:/Y+sk70Trc18BSnLW2CRBz
- TLSH T158B4022071C0C0B7D4BB113544E9CA369A76707147B9D5DBBAEC67BAAF202E163352CE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
UPX dump on OEP (original entry point)