General
- Target 2026-08-03_73cf3512c8682ce94e8dd9987aee7732_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 1.1MB
- Sample260803-c1vp1sar2v
- SHA256 5ceed4241ff3d8b4ef5a843e9f417789d4e2ff4014bf0af396a90863a3ea725c
- MD5 73cf3512c8682ce94e8dd9987aee7732
- SHA1 546ba2eb860476d1a0566e5514d07c45f236078b
- SHA512 2776849e75728d78df3d899b970f98d23e8d0bc1292512115dc408082ea217878d7735c363cce62c84fe649947f6ebe32a900d995f00dcce56a19cbb57540a48
- SSDEEP 12288:Lh1Lk70Tnvjcw8HdPjJO53AjFjU4e0xLVS6+GJ8m1/kx6OelgE4IWJ:3k70Trcw8HDW3K00x5S6+Hg/rzgUWJ
- TLSH T1F1357C82EE62E9D0EE3E06B26446976883567D7F4EC9145CE4DB32E25C7124D323B84F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_73cf3512c8682ce94e8dd9987aee7732_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
17 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_73cf3512c8682ce94e8dd9987aee7732_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_73cf3512c8682ce94e8dd9987aee7732_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 1.1MB
- SHA256 5ceed4241ff3d8b4ef5a843e9f417789d4e2ff4014bf0af396a90863a3ea725c
- MD5 73cf3512c8682ce94e8dd9987aee7732
- SHA1 546ba2eb860476d1a0566e5514d07c45f236078b
- SHA512 2776849e75728d78df3d899b970f98d23e8d0bc1292512115dc408082ea217878d7735c363cce62c84fe649947f6ebe32a900d995f00dcce56a19cbb57540a48
- SSDEEP 12288:Lh1Lk70Tnvjcw8HdPjJO53AjFjU4e0xLVS6+GJ8m1/kx6OelgE4IWJ:3k70Trcw8HDW3K00x5S6+Hg/rzgUWJ
- TLSH T1F1357C82EE62E9D0EE3E06B26446976883567D7F4EC9145CE4DB32E25C7124D323B84F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables packed with unregistered version of .NET Reactor
-
.NET Reactor proctector
Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.