General
- Target 2026-07-30_3b11be98c4d89a44412266625792dbf8_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 223KB
- Sample260730-ggwkest1ew
- SHA256 c0f5782487d042278de61d1553d61951076d69fc78354e89fe82096c75e001b1
- MD5 3b11be98c4d89a44412266625792dbf8
- SHA1 fd78b65bed30be051a055444aac5be575e76878e
- SHA512 2768581baa7cda171c0a3dc0ba43ddba4854bf3317084be3e3052c6ef1530ce8b145fc42bfb6bc00894e280fb9903dae000ab822a81f11949e8ebe40d5ef226c
- SSDEEP 6144:NrFZaaZmEJu2DKW1Lgbdl0TBBvjc/YVMt:/bE+uwh1Lk70TnvjcsMt
- TLSH T1F424CF2171C1C1B3C4BB113444EACA769A7A7072076A96D7B7EC27BA6F113E1A3352CD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-30_3b11be98c4d89a44412266625792dbf8_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-30_3b11be98c4d89a44412266625792dbf8_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
snojan
C2
-
http://wecan.hasthe.technology/upload
Targets
-
- Target 2026-07-30_3b11be98c4d89a44412266625792dbf8_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 223KB
- SHA256 c0f5782487d042278de61d1553d61951076d69fc78354e89fe82096c75e001b1
- MD5 3b11be98c4d89a44412266625792dbf8
- SHA1 fd78b65bed30be051a055444aac5be575e76878e
- SHA512 2768581baa7cda171c0a3dc0ba43ddba4854bf3317084be3e3052c6ef1530ce8b145fc42bfb6bc00894e280fb9903dae000ab822a81f11949e8ebe40d5ef226c
- SSDEEP 6144:NrFZaaZmEJu2DKW1Lgbdl0TBBvjc/YVMt:/bE+uwh1Lk70TnvjcsMt
- TLSH T1F424CF2171C1C1B3C4BB113444EACA769A7A7072076A96D7B7EC27BA6F113E1A3352CD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
UPX dump on OEP (original entry point)