General
- Target 2026-07-28_cb44db8644d95c56aeff035a415c96a0_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 368KB
- Sample260729-an5ncada64
- SHA256 39004d4e961f1dca7c258073047a2427e6703c6890aa6ea5adb40bff3f71095a
- MD5 cb44db8644d95c56aeff035a415c96a0
- SHA1 488c51795e345e1a042069c25da1d6798ba0723f
- SHA512 ae3e96fe37852cf07e74c8f254b69b073c9e13d103ecdfd977e7ca56d7838e6ec207aaea2aef3f18aadbf29a80eb7ad20fd99f114f22bafbc1635e0f4e9a452c
- SSDEEP 6144:NrFZaaZmEJuTDKW1Lgbdl0TBBvjc/YVM66dAFlJTSRUYzLY6hOfvb2wh:/bE+uHh1Lk70TnvjcsMxdABSnLHOr26
- TLSH T1D084F12071C0C1B2D4BB113544EACA769A76707207B9D5DBBBDC27BAAE113E163352CE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-28_cb44db8644d95c56aeff035a415c96a0_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-28_cb44db8644d95c56aeff035a415c96a0_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
snojan
C2
-
http://wecan.hasthe.technology/upload
Targets
-
- Target 2026-07-28_cb44db8644d95c56aeff035a415c96a0_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 368KB
- SHA256 39004d4e961f1dca7c258073047a2427e6703c6890aa6ea5adb40bff3f71095a
- MD5 cb44db8644d95c56aeff035a415c96a0
- SHA1 488c51795e345e1a042069c25da1d6798ba0723f
- SHA512 ae3e96fe37852cf07e74c8f254b69b073c9e13d103ecdfd977e7ca56d7838e6ec207aaea2aef3f18aadbf29a80eb7ad20fd99f114f22bafbc1635e0f4e9a452c
- SSDEEP 6144:NrFZaaZmEJuTDKW1Lgbdl0TBBvjc/YVM66dAFlJTSRUYzLY6hOfvb2wh:/bE+uHh1Lk70TnvjcsMxdABSnLHOr26
- TLSH T1D084F12071C0C1B2D4BB113544EACA769A76707207B9D5DBBBDC27BAAE113E163352CE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
UPX dump on OEP (original entry point)