General
- Target 2026-08-09_d59dba265b0230370da8de748d8909b7_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 440KB
- Sample260809-x6q91avama
- SHA256 1d5b238218f029c0686b1e5e3938d3b52d5c92f019e06be404e8e91e323cdc90
- MD5 d59dba265b0230370da8de748d8909b7
- SHA1 18fb9175aa0673ebabd3b7b402c00525ffe52832
- SHA512 173dc40d3c2260e1f8ba8d11b3118fe9159b211591933d85aec080eba6e8ce5f9440e40dd5c491f34631eaef560a8aa69c6e76feac0a07e605fd7f3e8643d298
- SSDEEP 12288:/bE+uUh1Lk70TnvjcsMxdABSnLHOr2fqRVw:/Y+Xk70Trc18BSnLW2CRC
- TLSH T194A4012071C1C0B2C4BB113544EACA369E35707247BAD5D7BBDD67BAAE112E1A3352CE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-09_d59dba265b0230370da8de748d8909b7_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_d59dba265b0230370da8de748d8909b7_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
snojan
C2
-
http://wecan.hasthe.technology/upload
Targets
-
- Target 2026-08-09_d59dba265b0230370da8de748d8909b7_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 440KB
- SHA256 1d5b238218f029c0686b1e5e3938d3b52d5c92f019e06be404e8e91e323cdc90
- MD5 d59dba265b0230370da8de748d8909b7
- SHA1 18fb9175aa0673ebabd3b7b402c00525ffe52832
- SHA512 173dc40d3c2260e1f8ba8d11b3118fe9159b211591933d85aec080eba6e8ce5f9440e40dd5c491f34631eaef560a8aa69c6e76feac0a07e605fd7f3e8643d298
- SSDEEP 12288:/bE+uUh1Lk70TnvjcsMxdABSnLHOr2fqRVw:/Y+Xk70Trc18BSnLW2CRC
- TLSH T194A4012071C1C0B2C4BB113544EACA369E35707247BAD5D7BBDD67BAAE112E1A3352CE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
UPX dump on OEP (original entry point)