2026-08-09_1d377421c634825a86b5f8802cee7da8_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee

General

Target
2026-08-09_1d377421c634825a86b5f8802cee7da8_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
Size 606KB
Sample260809-vn594asdnf
SHA256 e89f3999dcf6551d97fcbcbc84ae1cd57c40adff64ec7f0ec609b5e3f357540c
MD5 1d377421c634825a86b5f8802cee7da8
SHA1 044c939b21ce139003da8042885e4e411abdba48
SHA512 ac1997ea97ba0405005752f64c9b98b5f24ea80d1cbca613a8c32a163a0978ebaae03ee00105664535b63f236cacb308347cce5d8f4c57666d88686a8960e148
SSDEEP 12288:phZ8k10znvjcsMPFEN+sIhGBkz0knvjcXMa8Y+r0hnNkW0InvjcyM3:qk10zrc1PF4+Ykz0krccaZ+gkW0Ircr3
TLSH
T1F3D4BF1571C0C1B7D477113084D6CA76AA7E70320BAA96D7BADD2BBA6F103E1A3352CD
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
sample	UPX

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-09_1d377421c634825a86b5f8802cee7da8_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee

2026-08-09_1d377421c634825a86b5f8802cee7da8_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee

.exe 606KB

SHA256 e89f3999dcf6551d97fcbcbc84ae1cd57c40adff64ec7f0ec609b5e3f357540c
MD5 1d377421c634825a86b5f8802cee7da8
SHA1 044c939b21ce139003da8042885e4e411abdba48
SHA512 ac1997ea97ba0405005752f64c9b98b5f24ea80d1cbca613a8c32a163a0978ebaae03ee00105664535b63f236cacb308347cce5d8f4c57666d88686a8960e148
SSDEEP 12288:phZ8k10znvjcsMPFEN+sIhGBkz0knvjcXMa8Y+r0hnNkW0InvjcyM3:qk10zrc1PF4+Ykz0krccaZ+gkW0Ircr3
TLSH
T1F3D4BF1571C0C1B7D477113084D6CA76AA7E70320BAA96D7BADD2BBA6F103E1A3352CD
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

5

Entry point

52527

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths