General
- Target 2026-08-09_48d63f54cc32ceea1762a319486cc64b_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 901KB
- Sample260809-ztkmssce38
- SHA256 b87fcb7ab54b6f686a12087b33629e55c8b391e912203ec613ee5bdf13950f93
- MD5 48d63f54cc32ceea1762a319486cc64b
- SHA1 a4b990c576d6e09482f4e2545a7cf6f7c7ab391d
- SHA512 3f32fc150c836bd74453bbe19b3fca3dd14aac398890252656a167bfed8d406f8044f1eb4a7b311ec36224181a4d82c6c202b9adeec01a4df239ee870be7cd49
- SSDEEP 24576:/Y+3k70Trc18BSnLW2CRBKViu99LK1Rad6yZcTx:JkQTAKYS/v6h3+1uhZcTx
- TLSH T13815222471C0C4B7D46B413544C9CA72AA76707247BE99DBBBED63B9AF203E163342C9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-09_48d63f54cc32ceea1762a319486cc64b_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_48d63f54cc32ceea1762a319486cc64b_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
snojan
C2
-
http://wecan.hasthe.technology/upload
Targets
-
- Target 2026-08-09_48d63f54cc32ceea1762a319486cc64b_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 901KB
- SHA256 b87fcb7ab54b6f686a12087b33629e55c8b391e912203ec613ee5bdf13950f93
- MD5 48d63f54cc32ceea1762a319486cc64b
- SHA1 a4b990c576d6e09482f4e2545a7cf6f7c7ab391d
- SHA512 3f32fc150c836bd74453bbe19b3fca3dd14aac398890252656a167bfed8d406f8044f1eb4a7b311ec36224181a4d82c6c202b9adeec01a4df239ee870be7cd49
- SSDEEP 24576:/Y+3k70Trc18BSnLW2CRBKViu99LK1Rad6yZcTx:JkQTAKYS/v6h3+1uhZcTx
- TLSH T13815222471C0C4B7D46B413544C9CA72AA76707247BE99DBBBED63B9AF203E163342C9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
UPX dump on OEP (original entry point)