General
- Target 2026-08-08_f3170238287080cae41ee86ee8ad9383_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 512KB
- Sample260808-rc9xcsstbw
- SHA256 2ef8b33f29046e0e633fa427fae3a1f24a9f09ff397e9d8976c2146ac7961269
- MD5 f3170238287080cae41ee86ee8ad9383
- SHA1 114593f233f1098d24d7c96ae06a57899a0d8073
- SHA512 65939c36ae167655056dce765cc93deb95563947588399bb686e566326975af1626f2455d6dc58122e50823309603b576da990b6c0f844281c138ba6c24d8603
- SSDEEP 12288:/bE+udh1Lk70TnvjcsMxdABSnLHOr2fqRVnRjV:/Y+2k70Trc18BSnLW2CRBb
- TLSH T14AB4022071C0C0B7D4BB113544E9CB369A76307147B9D5DBBAED67BA6E202E1A3352CE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-08_f3170238287080cae41ee86ee8ad9383_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-08_f3170238287080cae41ee86ee8ad9383_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
snojan
C2
-
http://wecan.hasthe.technology/upload
Targets
-
- Target 2026-08-08_f3170238287080cae41ee86ee8ad9383_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 512KB
- SHA256 2ef8b33f29046e0e633fa427fae3a1f24a9f09ff397e9d8976c2146ac7961269
- MD5 f3170238287080cae41ee86ee8ad9383
- SHA1 114593f233f1098d24d7c96ae06a57899a0d8073
- SHA512 65939c36ae167655056dce765cc93deb95563947588399bb686e566326975af1626f2455d6dc58122e50823309603b576da990b6c0f844281c138ba6c24d8603
- SSDEEP 12288:/bE+udh1Lk70TnvjcsMxdABSnLHOr2fqRVnRjV:/Y+2k70Trc18BSnLW2CRBb
- TLSH T14AB4022071C0C0B7D4BB113544E9CB369A76307147B9D5DBBAED67BA6E202E1A3352CE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
UPX dump on OEP (original entry point)