General

  • Target
    2026-07-29_c8060ddbae8e133dfd3b9d080353a968_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
  • Size 592KB
  • Sample260729-re76jshe32
  • SHA256 c10a1d44e36bde3a154f2ea20e6cfdde2b378e272446d8b2916483866fce8c20
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Extracted

Family
  • snojan

C2
  • http://wecan.hasthe.technology/upload

Targets

    • Target
      2026-07-29_c8060ddbae8e133dfd3b9d080353a968_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
    • Size 592KB
    • SHA256 c10a1d44e36bde3a154f2ea20e6cfdde2b378e272446d8b2916483866fce8c20
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Family: Snojan

      Snojan is a downloader used to drop and execute other malware.

    • UPX dump on OEP (original entry point)

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v16

Tasks