General
- Target 2026-08-20_d8ac40116da38b8006deb56ca51a0425_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 448KB
- Sample260820-ndg17avhrb
- SHA256 9c00ddf444d9c627f5607d529a6ac901826f9e7994bebb680b2c9de54c5bd454
- MD5 d8ac40116da38b8006deb56ca51a0425
- SHA1 5d0beb02ee3e36830d05e1add1421ca617354fb9
- SHA512 a0a09723e75c9a40060e2e209b405a788028137c33186012dd490482a9c8655de389e59b36ac476da82f8b398ecb56953200ae23b8e1c9706d12c0682ba3d531
- SSDEEP 12288:/bE+urh1Lk70TnvjcsMxdABSnLHOr2fqRVs:/Y+4k70Trc18BSnLW2CRy
- TLSH T105A4022071C1C0B2D4BB113544EACA369E36707247B9D5DBBBDD67B66E202E1A3352CE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-20_d8ac40116da38b8006deb56ca51a0425_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-20_d8ac40116da38b8006deb56ca51a0425_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
snojan
C2
-
http://wecan.hasthe.technology/upload
Targets
-
- Target 2026-08-20_d8ac40116da38b8006deb56ca51a0425_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 448KB
- SHA256 9c00ddf444d9c627f5607d529a6ac901826f9e7994bebb680b2c9de54c5bd454
- MD5 d8ac40116da38b8006deb56ca51a0425
- SHA1 5d0beb02ee3e36830d05e1add1421ca617354fb9
- SHA512 a0a09723e75c9a40060e2e209b405a788028137c33186012dd490482a9c8655de389e59b36ac476da82f8b398ecb56953200ae23b8e1c9706d12c0682ba3d531
- SSDEEP 12288:/bE+urh1Lk70TnvjcsMxdABSnLHOr2fqRVs:/Y+4k70Trc18BSnLW2CRy
- TLSH T105A4022071C1C0B2D4BB113544EACA369E36707247B9D5DBBBDD67B66E202E1A3352CE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
UPX dump on OEP (original entry point)