General
- Target 2026-08-13_e4b72b0c4a506157bf075f4d7a3e8957_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 512KB
- Sample260813-wcmjaavfpg
- SHA256 2afc2c4c8351284fc6f891636927d50262120d5c18430a005284d49acfab531f
- MD5 e4b72b0c4a506157bf075f4d7a3e8957
- SHA1 efc57d6aab4ad6d66a1c8dacaac3adbda11cdd25
- SHA512 f2d5e3283e40056a28a5600d5507878959be3ade6162c8c352d7e75faf7c3cc008ac507a7dfc9ebb1e8eb6f3b61bb747c7f43516f1267c3563523bb3cc458153
- SSDEEP 12288:/bE+ubh1Lk70TnvjcsMxdABSnLHOr2fqRVnRjV:/Y+wk70Trc18BSnLW2CRBb
- TLSH T13AB4022071C0C0B7D4BB113544E9CB369A76307147B9D5DBBAED67BA6E202E1A3352CE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-13_e4b72b0c4a506157bf075f4d7a3e8957_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-13_e4b72b0c4a506157bf075f4d7a3e8957_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
snojan
C2
-
http://wecan.hasthe.technology/upload
Targets
-
- Target 2026-08-13_e4b72b0c4a506157bf075f4d7a3e8957_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 512KB
- SHA256 2afc2c4c8351284fc6f891636927d50262120d5c18430a005284d49acfab531f
- MD5 e4b72b0c4a506157bf075f4d7a3e8957
- SHA1 efc57d6aab4ad6d66a1c8dacaac3adbda11cdd25
- SHA512 f2d5e3283e40056a28a5600d5507878959be3ade6162c8c352d7e75faf7c3cc008ac507a7dfc9ebb1e8eb6f3b61bb747c7f43516f1267c3563523bb3cc458153
- SSDEEP 12288:/bE+ubh1Lk70TnvjcsMxdABSnLHOr2fqRVnRjV:/Y+wk70Trc18BSnLW2CRBb
- TLSH T13AB4022071C0C0B7D4BB113544E9CB369A76307147B9D5DBBAED67BA6E202E1A3352CE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
UPX dump on OEP (original entry point)