General
- Target 2026-08-10_00454bbebdb791c8320f05f944da7478_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 816KB
- Sample260810-22xnfabb34
- SHA256 4379b3d7f87280297270c331d6e02166da417ef2f60d3ac40a0a5968312fefbf
- MD5 00454bbebdb791c8320f05f944da7478
- SHA1 0c99d1a25bd44b21ac2bdfe8cf10e90e851edd87
- SHA512 8a94a9876a1616895d365cf8535b720536cecc92d5ded0014d804e644fef84075d5339e5b3b474371790e948cfe75caf68eaccc529f0e69044af1872c611ad3d
- SSDEEP 24576:/Y+Ak70Trc18BSnLW2CRBKViu99LK1Rad6v:ukQTAKYS/v6h3+1uK
- TLSH T16605122471C0C4B6D4BB013544D9CB72AE7670B247BA94DB7ADD63B6AF203E1A3352C9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-10_00454bbebdb791c8320f05f944da7478_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-10_00454bbebdb791c8320f05f944da7478_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260710-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
snojan
C2
-
http://wecan.hasthe.technology/upload
Targets
-
- Target 2026-08-10_00454bbebdb791c8320f05f944da7478_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 816KB
- SHA256 4379b3d7f87280297270c331d6e02166da417ef2f60d3ac40a0a5968312fefbf
- MD5 00454bbebdb791c8320f05f944da7478
- SHA1 0c99d1a25bd44b21ac2bdfe8cf10e90e851edd87
- SHA512 8a94a9876a1616895d365cf8535b720536cecc92d5ded0014d804e644fef84075d5339e5b3b474371790e948cfe75caf68eaccc529f0e69044af1872c611ad3d
- SSDEEP 24576:/Y+Ak70Trc18BSnLW2CRBKViu99LK1Rad6v:ukQTAKYS/v6h3+1uK
- TLSH T16605122471C0C4B6D4BB013544D9CB72AE7670B247BA94DB7ADD63B6AF203E1A3352C9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
UPX dump on OEP (original entry point)