2026-08-09_6c0e295b2d036ee49b0baf3cf50f04db_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee

General

Target
2026-08-09_6c0e295b2d036ee49b0baf3cf50f04db_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
Size 2.0MB
Sample260809-rlht8sgk8s
SHA256 20cadcb55a5f0249c582f35bceb67d5b11dff254d1f6f720e268b623d32425e7
MD5 6c0e295b2d036ee49b0baf3cf50f04db
SHA1 0167dbc986faf0e8b03e6d6288d9952c0ecc974c
SHA512 8a7a49c70dc4851f14b1087fe5133d594a0c335b7b2fe32f9320cb96fff46277794e0e8dfce7891bd71ba60431311c6534df46695354e821821f324ea6ea79db
SSDEEP 49152:ukyJA55dOoDhga4PbZ8TfkS0Ak0bttQEwF1hD/ZCT7kZVAbc:ui5z1AbZ8Tfvk2QlF/ZCT73bc
TLSH
T137A5121AF2C0C0B7F46A213584C5CE757A39B0BB83BD46DBBA9D57B56E202E063352C5
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
sample	UPX

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-09_6c0e295b2d036ee49b0baf3cf50f04db_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee

2026-08-09_6c0e295b2d036ee49b0baf3cf50f04db_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee

.exe 2.0MB

SHA256 20cadcb55a5f0249c582f35bceb67d5b11dff254d1f6f720e268b623d32425e7
MD5 6c0e295b2d036ee49b0baf3cf50f04db
SHA1 0167dbc986faf0e8b03e6d6288d9952c0ecc974c
SHA512 8a7a49c70dc4851f14b1087fe5133d594a0c335b7b2fe32f9320cb96fff46277794e0e8dfce7891bd71ba60431311c6534df46695354e821821f324ea6ea79db
SSDEEP 49152:ukyJA55dOoDhga4PbZ8TfkS0Ak0bttQEwF1hD/ZCT7kZVAbc:ui5z1AbZ8Tfvk2QlF/ZCT73bc
TLSH
T137A5121AF2C0C0B7F46A213584C5CE757A39B0BB83BD46DBBA9D57B56E202E063352C5
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

5

Entry point

52527

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths