General
- Target 2026-08-04_7470a6af009e45691987f3ebdd620ecf_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 783KB
- Sample260804-2rae6aaa52
- SHA256 5bfb49129428333adc2f81ee30cbbfb522b1b19128416495e81cac7004804d0f
- MD5 7470a6af009e45691987f3ebdd620ecf
- SHA1 d6188e5ccaec692f14e4446e3b18613dbc6c199a
- SHA512 77ecdda0a59eea0e90be8352b2d6f5b4f0978d1377a2b82d5e0f2c4f856167a21171328993803cbc7e9f3929016e300849e5399fdb4bfae7b2e0498929920741
- SSDEEP 24576:/Y+4k70Trc18BSnLW2CRBKViu99LK1Rad69:ukQTAKYS/v6h3+1uO
- TLSH T17C05122071C0C5B6D4B7013544D9CBB6AE76707247B994DBBAED63A6AF203E1A3342C9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-04_7470a6af009e45691987f3ebdd620ecf_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-04_7470a6af009e45691987f3ebdd620ecf_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
snojan
C2
-
http://wecan.hasthe.technology/upload
Targets
-
- Target 2026-08-04_7470a6af009e45691987f3ebdd620ecf_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 783KB
- SHA256 5bfb49129428333adc2f81ee30cbbfb522b1b19128416495e81cac7004804d0f
- MD5 7470a6af009e45691987f3ebdd620ecf
- SHA1 d6188e5ccaec692f14e4446e3b18613dbc6c199a
- SHA512 77ecdda0a59eea0e90be8352b2d6f5b4f0978d1377a2b82d5e0f2c4f856167a21171328993803cbc7e9f3929016e300849e5399fdb4bfae7b2e0498929920741
- SSDEEP 24576:/Y+4k70Trc18BSnLW2CRBKViu99LK1Rad69:ukQTAKYS/v6h3+1uO
- TLSH T17C05122071C0C5B6D4B7013544D9CBB6AE76707247B994DBBAED63A6AF203E1A3342C9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
UPX dump on OEP (original entry point)