General
- Target 2026-07-31_28e46981956af6073fd67bbff1862224_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 224KB
- Sample260731-pefp7aszew
- SHA256 33ea8b391ad9cc9b9d058436d2d06952f9f285cb4a4ec661cecca668483433c3
- MD5 28e46981956af6073fd67bbff1862224
- SHA1 011ac12431ba591f6f055f6be1543c0f48043e67
- SHA512 01a330b2d779c99c109120b857e4b5b9cbb34a1765c11e852a1c7bbbaf66d23cccb6bd917fd775c01f80f25ac7193e23e1f086449254eea8c04434229003e055
- SSDEEP 6144:NrFZaaZmEJuFDKW1Lgbdl0TBBvjc/YVMH:/bE+u9h1Lk70TnvjcsMH
- TLSH T18A24CF2171C1C1B3C4B7113444EACA769A7A7072076A96D7B7EC27BA6F113E1A3352CD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-31_28e46981956af6073fd67bbff1862224_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-31_28e46981956af6073fd67bbff1862224_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
snojan
C2
-
http://wecan.hasthe.technology/upload
Targets
-
- Target 2026-07-31_28e46981956af6073fd67bbff1862224_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 224KB
- SHA256 33ea8b391ad9cc9b9d058436d2d06952f9f285cb4a4ec661cecca668483433c3
- MD5 28e46981956af6073fd67bbff1862224
- SHA1 011ac12431ba591f6f055f6be1543c0f48043e67
- SHA512 01a330b2d779c99c109120b857e4b5b9cbb34a1765c11e852a1c7bbbaf66d23cccb6bd917fd775c01f80f25ac7193e23e1f086449254eea8c04434229003e055
- SSDEEP 6144:NrFZaaZmEJuFDKW1Lgbdl0TBBvjc/YVMH:/bE+u9h1Lk70TnvjcsMH
- TLSH T18A24CF2171C1C1B3C4B7113444EACA769A7A7072076A96D7B7EC27BA6F113E1A3352CD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
UPX dump on OEP (original entry point)