General
- Target 2026-08-22_31da4c4e80378034a3fd0b8c9dfd7f38_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 1.6MB
- Sample260823-meef1saa36
- SHA256 294d4dae8e8795c02a2e18d3f601e1f800137670310d159f825488ee5452c57c
- MD5 31da4c4e80378034a3fd0b8c9dfd7f38
- SHA1 2b663f9f25642febfbd54e7022a319f5faf2c7aa
- SHA512 475d105b2443bb7e9d26800b990e16adb5ec465267b9d4b3cbc7eab12b961fea436f4a7f7a12afb98bd4f68ac73b87a46d6194267328589ca1877a79f235b6a2
- SSDEEP 24576:zk70Trcaa36f8Sg1UMHWONNaAlCf20egMCrP0Sf1OoPGUQu9i+JCVNM:zkQTAaN1g1N2Oj0hePCtsoPf9dSM
- TLSH T11B752324B1C2C132C566113191E6CB790A7A3E3687B255D7BA9537F37F922E3A6360C3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-22_31da4c4e80378034a3fd0b8c9dfd7f38_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-22_31da4c4e80378034a3fd0b8c9dfd7f38_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-22_31da4c4e80378034a3fd0b8c9dfd7f38_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 1.6MB
- SHA256 294d4dae8e8795c02a2e18d3f601e1f800137670310d159f825488ee5452c57c
- MD5 31da4c4e80378034a3fd0b8c9dfd7f38
- SHA1 2b663f9f25642febfbd54e7022a319f5faf2c7aa
- SHA512 475d105b2443bb7e9d26800b990e16adb5ec465267b9d4b3cbc7eab12b961fea436f4a7f7a12afb98bd4f68ac73b87a46d6194267328589ca1877a79f235b6a2
- SSDEEP 24576:zk70Trcaa36f8Sg1UMHWONNaAlCf20egMCrP0Sf1OoPGUQu9i+JCVNM:zkQTAaN1g1N2Oj0hePCtsoPf9dSM
- TLSH T11B752324B1C2C132C566113191E6CB790A7A3E3687B255D7BA9537F37F922E3A6360C3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables packed with unregistered version of .NET Reactor
-
.NET Reactor proctector
Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.