General
- Target 2026-08-02_1221cc003bb5067494400b84c2cfaf42_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 1024KB
- Sample260803-a7a8vazxcs
- SHA256 07612a15c43f634a033bd59c350051e201ed87b660f32d835333a10ec8046466
- MD5 1221cc003bb5067494400b84c2cfaf42
- SHA1 4306e92a8e86396c54bf1b2abfdc59662b11b449
- SHA512 466610c35a8997ac216ec18ea7564913ca8624a3110e6bed82f31ddb9e874657cd8b39d2d47122985721e5e4978154baa206a399da0c657475704c9cd45b29ac
- SSDEEP 24576:/Y+Fk70Trc18BSnLW2CRBKViu99LK1Rad6yZcT29fhducOq:jkQTAKYS/v6h3+1uhZcT2NnvOq
- TLSH T18925222471C0C4B3E46B503544C9CA76AA76B072477E89DBBBED63E5AF203E163352C9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-02_1221cc003bb5067494400b84c2cfaf42_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-02_1221cc003bb5067494400b84c2cfaf42_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
snojan
C2
-
http://wecan.hasthe.technology/upload
Targets
-
- Target 2026-08-02_1221cc003bb5067494400b84c2cfaf42_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 1024KB
- SHA256 07612a15c43f634a033bd59c350051e201ed87b660f32d835333a10ec8046466
- MD5 1221cc003bb5067494400b84c2cfaf42
- SHA1 4306e92a8e86396c54bf1b2abfdc59662b11b449
- SHA512 466610c35a8997ac216ec18ea7564913ca8624a3110e6bed82f31ddb9e874657cd8b39d2d47122985721e5e4978154baa206a399da0c657475704c9cd45b29ac
- SSDEEP 24576:/Y+Fk70Trc18BSnLW2CRBKViu99LK1Rad6yZcT29fhducOq:jkQTAKYS/v6h3+1uhZcT2NnvOq
- TLSH T18925222471C0C4B3E46B503544C9CA76AA76B072477E89DBBBED63E5AF203E163352C9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
UPX dump on OEP (original entry point)