General
- Target 2026-08-14_ad8a2dceb9f4d9ca6a0442125fa8145f_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 396KB
- Sample260814-d26dkseh94
- SHA256 fc970921db38b2b0cf8db650e71fd20828914b105cffc409e9076d3c30ed1f40
- MD5 ad8a2dceb9f4d9ca6a0442125fa8145f
- SHA1 5f088689cce44809d54a4692eb2425975110b510
- SHA512 c33634a675914d7bcd3142b5cafb207b0e51dfb5686becf2a527b7a5302b6b400fbf58212f30d62a74e04a421cc134606b2fe1d6c4c6330a33682a6d20dcb64b
- SSDEEP 6144:aDKW1Lgbdl0TBBvjc/SZyrNfP+TyXXw+jsF:ch1Lk70TnvjcqUpP+TyXAfF
- TLSH T169843B1021CF8DE2F8718BB1E29982DB15E1AC22376244F22ACF77B5C5D4D92F2D51E6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-14_ad8a2dceb9f4d9ca6a0442125fa8145f_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-14_ad8a2dceb9f4d9ca6a0442125fa8145f_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-14_ad8a2dceb9f4d9ca6a0442125fa8145f_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 396KB
- SHA256 fc970921db38b2b0cf8db650e71fd20828914b105cffc409e9076d3c30ed1f40
- MD5 ad8a2dceb9f4d9ca6a0442125fa8145f
- SHA1 5f088689cce44809d54a4692eb2425975110b510
- SHA512 c33634a675914d7bcd3142b5cafb207b0e51dfb5686becf2a527b7a5302b6b400fbf58212f30d62a74e04a421cc134606b2fe1d6c4c6330a33682a6d20dcb64b
- SSDEEP 6144:aDKW1Lgbdl0TBBvjc/SZyrNfP+TyXXw+jsF:ch1Lk70TnvjcqUpP+TyXAfF
- TLSH T169843B1021CF8DE2F8718BB1E29982DB15E1AC22376244F22ACF77B5C5D4D92F2D51E6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables packed with unregistered version of .NET Reactor
-
.NET Reactor proctector
Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.