General
- Target 2026-07-29_c82b8808960beea773888d4559551923_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 902KB
- Sample260729-x95xkatvct
- SHA256 45368a65077672e11b0435afa194e8b53be79706ba3369b1f9761e5ff94bf0a8
- MD5 c82b8808960beea773888d4559551923
- SHA1 746cb4cb8380b3e568719bed18001a710f9e0d36
- SHA512 9910961643e1d98386b2656de54ecad3b9f6239f78299dcd96d5704c0302556dc28ed86bd96407fad7810a3ea2959dba707b0451f4ce82cfdb06845e8158ed49
- SSDEEP 24576:/Y+Ek70Trc18BSnLW2CRBKViu99LK1Rad6yZcTM:akQTAKYS/v6h3+1uhZcTM
- TLSH T1E115222471C0C4B6D46B413544C9CA72AA76707247BE99DBBBED63B9AF203E163342C9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-29_c82b8808960beea773888d4559551923_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-29_c82b8808960beea773888d4559551923_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
snojan
C2
-
http://wecan.hasthe.technology/upload
Targets
-
- Target 2026-07-29_c82b8808960beea773888d4559551923_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 902KB
- SHA256 45368a65077672e11b0435afa194e8b53be79706ba3369b1f9761e5ff94bf0a8
- MD5 c82b8808960beea773888d4559551923
- SHA1 746cb4cb8380b3e568719bed18001a710f9e0d36
- SHA512 9910961643e1d98386b2656de54ecad3b9f6239f78299dcd96d5704c0302556dc28ed86bd96407fad7810a3ea2959dba707b0451f4ce82cfdb06845e8158ed49
- SSDEEP 24576:/Y+Ek70Trc18BSnLW2CRBKViu99LK1Rad6yZcTM:akQTAKYS/v6h3+1uhZcTM
- TLSH T1E115222471C0C4B6D46B413544C9CA72AA76707247BE99DBBBED63B9AF203E163342C9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
UPX dump on OEP (original entry point)