2026-08-17_f5cef25e1dafdd45260f01852b731fe5_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee

General

Target
2026-08-17_f5cef25e1dafdd45260f01852b731fe5_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
Size 2.0MB
Sample260817-v4fz5seq41
SHA256 4b48237537486e1c573167d3c4e03250358b7660ad4ce22c06d9dc79a27ec741
MD5 f5cef25e1dafdd45260f01852b731fe5
SHA1 c1057f42f98d1de1205c3078e843749802ae0052
SHA512 4c0f3c0c69e74802b27edf917ce2abb6f1bcde61eb0e46b34a5eb4914ca6f59d1e50650e6c8eadf2b8625be62a8537186ef4df00b99e5376f6bbfa2e16e04d18
SSDEEP 49152:jj1jlSkBgTWNr1Mh1ZUKTpUoPMhD8XJN04V8vsZaTmx:jzSxm41ZtTpahgqBsZaTmx
TLSH
T171A5F1ADE28CC07BF42A6D3558C1CD36367CA0A6539846E77EC8279B2ED53C013762E5
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
sample	UPX

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-17_f5cef25e1dafdd45260f01852b731fe5_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee

2026-08-17_f5cef25e1dafdd45260f01852b731fe5_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee

.exe 2.0MB

SHA256 4b48237537486e1c573167d3c4e03250358b7660ad4ce22c06d9dc79a27ec741
MD5 f5cef25e1dafdd45260f01852b731fe5
SHA1 c1057f42f98d1de1205c3078e843749802ae0052
SHA512 4c0f3c0c69e74802b27edf917ce2abb6f1bcde61eb0e46b34a5eb4914ca6f59d1e50650e6c8eadf2b8625be62a8537186ef4df00b99e5376f6bbfa2e16e04d18
SSDEEP 49152:jj1jlSkBgTWNr1Mh1ZUKTpUoPMhD8XJN04V8vsZaTmx:jzSxm41ZtTpahgqBsZaTmx
TLSH
T171A5F1ADE28CC07BF42A6D3558C1CD36367CA0A6539846E77EC8279B2ED53C013762E5
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

5

Entry point

52527

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths