General
- Target 2026-08-02_105ddada257b8f5bb37a64a1039c10ac_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 914KB
- Sample260802-pc961sseqc
- SHA256 7aed8c7d2b1c50aa23d357026dbf6787b5b61dde8b3d997855a5176fd24fbb3f
- MD5 105ddada257b8f5bb37a64a1039c10ac
- SHA1 a9fc71ab08f01a6c82ceb3339eb1fd59e58278d8
- SHA512 022a107d697a019ea434d17bc2bd7b186b5878bccecea7c025477c8d9729945853164f63dce1a87eac8f0e5fd4b1b1aefccac0df9ef4e0a4a23e607136da8a50
- SSDEEP 24576:Vk70TrciAjxWG/qkpofeAeGquMhZJmumpoVVsGP3q:VkQTAiAUkpofft7voVVR3q
- TLSH T18D15121975C0C0B2E477143149E996369E7A7D3187B691E7B28837B63F713E0A3722CA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-02_105ddada257b8f5bb37a64a1039c10ac_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-02_105ddada257b8f5bb37a64a1039c10ac_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_105ddada257b8f5bb37a64a1039c10ac_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 914KB
- SHA256 7aed8c7d2b1c50aa23d357026dbf6787b5b61dde8b3d997855a5176fd24fbb3f
- MD5 105ddada257b8f5bb37a64a1039c10ac
- SHA1 a9fc71ab08f01a6c82ceb3339eb1fd59e58278d8
- SHA512 022a107d697a019ea434d17bc2bd7b186b5878bccecea7c025477c8d9729945853164f63dce1a87eac8f0e5fd4b1b1aefccac0df9ef4e0a4a23e607136da8a50
- SSDEEP 24576:Vk70TrciAjxWG/qkpofeAeGquMhZJmumpoVVsGP3q:VkQTAiAUkpofft7voVVR3q
- TLSH T18D15121975C0C0B2E477143149E996369E7A7D3187B691E7B28837B63F713E0A3722CA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables packed with unregistered version of .NET Reactor
-
.NET Reactor proctector
Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.