General
- Target 2026-08-05_36001880301765ab597ab4059bace943_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 223KB
- Sample260805-tmx2nacj5w
- SHA256 1df63ac04332e6bacdba0f920fc67f8e9034e848ded63fdf630c4eee79fa01f9
- MD5 36001880301765ab597ab4059bace943
- SHA1 019afe835b8438c555d3fc852cf3269299f8a08d
- SHA512 d2416609b21986c965480467fe29b29c05976be18736ff3290e91003799d13ca68d942ef3a1e205529cf77223fa7dcacecd7d8c84060673af5a02666540baeb8
- SSDEEP 6144:NrFZaaZmEJudDKW1Lgbdl0TBBvjc/YVMt:/bE+uVh1Lk70TnvjcsMt
- TLSH T18E24CF2171C1C1B3C4B7113444EACA769A7A7072076A96D7B7EC27BA6F113E1A3352CD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-05_36001880301765ab597ab4059bace943_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-05_36001880301765ab597ab4059bace943_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
snojan
C2
-
http://wecan.hasthe.technology/upload
Targets
-
- Target 2026-08-05_36001880301765ab597ab4059bace943_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 223KB
- SHA256 1df63ac04332e6bacdba0f920fc67f8e9034e848ded63fdf630c4eee79fa01f9
- MD5 36001880301765ab597ab4059bace943
- SHA1 019afe835b8438c555d3fc852cf3269299f8a08d
- SHA512 d2416609b21986c965480467fe29b29c05976be18736ff3290e91003799d13ca68d942ef3a1e205529cf77223fa7dcacecd7d8c84060673af5a02666540baeb8
- SSDEEP 6144:NrFZaaZmEJudDKW1Lgbdl0TBBvjc/YVMt:/bE+uVh1Lk70TnvjcsMt
- TLSH T18E24CF2171C1C1B3C4B7113444EACA769A7A7072076A96D7B7EC27BA6F113E1A3352CD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
UPX dump on OEP (original entry point)