General
- Target 2026-08-02_6b7f8caa934509b907952511cbe59f65_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 364KB
- Sample260802-nl3ymahq2w
- SHA256 c1351f569c1f4ee2df719b326cf5098b3be9f1b271b3eadaf5c1b0a3a1aedf02
- MD5 6b7f8caa934509b907952511cbe59f65
- SHA1 049e254040f528552e19b18d4ee65308c6f6536d
- SHA512 11fd5d9652eb8c866d649ee7cafc282235aa1793697b3fe31c2f2025e0226a7063a03a438e433fccddae4dd03a87183fdc3fd689fff7724fb2854b59eb8248f9
- SSDEEP 6144:NrFZaaZmEJuXDKW1Lgbdl0TBBvjc/YVM66dAFlJTSRUYzLY6hOfvb2wJ:/bE+uTh1Lk70TnvjcsMxdABSnLHOr2K
- TLSH T13D84F12071C0C1B2D4BB113544EACA769A76707207B9D5DBBBDD27BAAE103E163352CE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-02_6b7f8caa934509b907952511cbe59f65_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-02_6b7f8caa934509b907952511cbe59f65_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
snojan
C2
-
http://wecan.hasthe.technology/upload
Targets
-
- Target 2026-08-02_6b7f8caa934509b907952511cbe59f65_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 364KB
- SHA256 c1351f569c1f4ee2df719b326cf5098b3be9f1b271b3eadaf5c1b0a3a1aedf02
- MD5 6b7f8caa934509b907952511cbe59f65
- SHA1 049e254040f528552e19b18d4ee65308c6f6536d
- SHA512 11fd5d9652eb8c866d649ee7cafc282235aa1793697b3fe31c2f2025e0226a7063a03a438e433fccddae4dd03a87183fdc3fd689fff7724fb2854b59eb8248f9
- SSDEEP 6144:NrFZaaZmEJuXDKW1Lgbdl0TBBvjc/YVM66dAFlJTSRUYzLY6hOfvb2wJ:/bE+uTh1Lk70TnvjcsMxdABSnLHOr2K
- TLSH T13D84F12071C0C1B2D4BB113544EACA769A76707207B9D5DBBBDD27BAAE103E163352CE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
UPX dump on OEP (original entry point)