General
- Target 2026-08-06_b539d60f8678348c1138875749892349_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 896KB
- Sample260806-vegkdaba86
- SHA256 05fc4e94d2d034e19394e875d14e9a1fac7267d1388a1ab7e8023bcf1b6e318e
- MD5 b539d60f8678348c1138875749892349
- SHA1 138af454c6fdd3bc9cc75f2bf08632f190b424d1
- SHA512 472f0399f4ea4d12418cbe86688fa8f28e80ff2e66a237272e1cd12c8b0728b8e70b971bac78b33d88970d12365c75825ca7237f69b95163b990e11071c415e4
- SSDEEP 24576:/Y+Bk70Trc18BSnLW2CRBKViu99LK1Rad6yZcTW:TkQTAKYS/v6h3+1uhZcTW
- TLSH T1E215222471C0C4B2D477413544C9CA72AA76707247BE99DBBBED63B9AF203E163352CA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-06_b539d60f8678348c1138875749892349_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-06_b539d60f8678348c1138875749892349_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
snojan
C2
-
http://wecan.hasthe.technology/upload
Targets
-
- Target 2026-08-06_b539d60f8678348c1138875749892349_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 896KB
- SHA256 05fc4e94d2d034e19394e875d14e9a1fac7267d1388a1ab7e8023bcf1b6e318e
- MD5 b539d60f8678348c1138875749892349
- SHA1 138af454c6fdd3bc9cc75f2bf08632f190b424d1
- SHA512 472f0399f4ea4d12418cbe86688fa8f28e80ff2e66a237272e1cd12c8b0728b8e70b971bac78b33d88970d12365c75825ca7237f69b95163b990e11071c415e4
- SSDEEP 24576:/Y+Bk70Trc18BSnLW2CRBKViu99LK1Rad6yZcTW:TkQTAKYS/v6h3+1uhZcTW
- TLSH T1E215222471C0C4B2D477413544C9CA72AA76707247BE99DBBBED63B9AF203E163352CA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
UPX dump on OEP (original entry point)