2026-08-09_dde7f37019f9ff67deb87ad36c94f911_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee

General

Target
2026-08-09_dde7f37019f9ff67deb87ad36c94f911_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
Size 2.0MB
Sample260809-qs46dafn9v
SHA256 9dc00aca16c5b5730f7cf879d4c14a492eed25723065f3a1d811ddfa9de56756
MD5 dde7f37019f9ff67deb87ad36c94f911
SHA1 dad736423c0073e72204d44467e56522e31930ef
SHA512 77fd6545a647159b7fd375c7a467ff22acbbf919505380a2219111bdd1e3e4821d19734884e667c441938034e5e3c005887e4ef381b9305d0216871ae5e367c7
SSDEEP 49152:CkfdAHmabwAQm30HOZUTRaN8KFkvnAcj+iK8tnspE1ZzT++Ii/R:CZHwBdOZUTRI8qbcWYL1ZzT+1iZ
TLSH
T1C1A5129DF08AC4B6F22292700895CD62B5F6F06E5FA945DB3B85BBD39A203E013353D5
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
sample	UPX

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-09_dde7f37019f9ff67deb87ad36c94f911_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee

2026-08-09_dde7f37019f9ff67deb87ad36c94f911_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee

.exe 2.0MB

SHA256 9dc00aca16c5b5730f7cf879d4c14a492eed25723065f3a1d811ddfa9de56756
MD5 dde7f37019f9ff67deb87ad36c94f911
SHA1 dad736423c0073e72204d44467e56522e31930ef
SHA512 77fd6545a647159b7fd375c7a467ff22acbbf919505380a2219111bdd1e3e4821d19734884e667c441938034e5e3c005887e4ef381b9305d0216871ae5e367c7
SSDEEP 49152:CkfdAHmabwAQm30HOZUTRaN8KFkvnAcj+iK8tnspE1ZzT++Ii/R:CZHwBdOZUTRI8qbcWYL1ZzT+1iZ
TLSH
T1C1A5129DF08AC4B6F22292700895CD62B5F6F06E5FA945DB3B85BBD39A203E013353D5
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

5

Entry point

52527

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths