General
- Target 2026-07-30_0d7fde439259079ce8948d998aa5959a_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 512KB
- Sample260730-2nwh8a11as
- SHA256 3ccb1e182db5d03b8559278c6e8625107ee6e7b65f42464a60225ba643f24c83
- MD5 0d7fde439259079ce8948d998aa5959a
- SHA1 5cf49a127860c8f8c416e531f9381d3679af8f49
- SHA512 f7094939c7bcdc2c7344c283373022e3e57b09c2a82371c30fb7ed3e250f876ccd99c2ae29123983b2c77652bb71d3c08ebd9dc57f8202da8361d95455934f03
- SSDEEP 12288:/bE+ulh1Lk70TnvjcsMxdABSnLHOr2fqRVnRjV:/Y+Wk70Trc18BSnLW2CRBb
- TLSH T1A4B4022071C0C0B7D4BB113544E9CB369A76307147B9D5DBBAED67BA6E202E1A3352CE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-30_0d7fde439259079ce8948d998aa5959a_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-30_0d7fde439259079ce8948d998aa5959a_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
snojan
C2
-
http://wecan.hasthe.technology/upload
Targets
-
- Target 2026-07-30_0d7fde439259079ce8948d998aa5959a_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 512KB
- SHA256 3ccb1e182db5d03b8559278c6e8625107ee6e7b65f42464a60225ba643f24c83
- MD5 0d7fde439259079ce8948d998aa5959a
- SHA1 5cf49a127860c8f8c416e531f9381d3679af8f49
- SHA512 f7094939c7bcdc2c7344c283373022e3e57b09c2a82371c30fb7ed3e250f876ccd99c2ae29123983b2c77652bb71d3c08ebd9dc57f8202da8361d95455934f03
- SSDEEP 12288:/bE+ulh1Lk70TnvjcsMxdABSnLHOr2fqRVnRjV:/Y+Wk70Trc18BSnLW2CRBb
- TLSH T1A4B4022071C0C0B7D4BB113544E9CB369A76307147B9D5DBBAED67BA6E202E1A3352CE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
UPX dump on OEP (original entry point)