General
- Target 2026-08-24_fb80fadaab69031a80ff6aadb3ee4fc3_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 774KB
- Sample260824-xybvcasejh
- SHA256 6a1cc80d6c101a8b823477cb6eae8de684f4c74b664c9e55c58bc1c68c1d53bc
- MD5 fb80fadaab69031a80ff6aadb3ee4fc3
- SHA1 cd256ad7434747866d65b9bcd6dab68e05c34220
- SHA512 d1a70fdf00f8708c640a3df0e555dd221be89c9c474d27fe1c73b83f1fb01922038518dc1c846adf5a767eb9a800f259c22b4461fe89497766ffcfdcc5268dad
- SSDEEP 24576:/Y+Fk70Trc18BSnLW2CRBKViu99LK1Rad6w:3kQTAKYS/v6h3+1uR
- TLSH T104F4122071C0C5B6D4B7013944D9CBB6AE76307247B994DBBADD63BAAF203E163352C9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-24_fb80fadaab69031a80ff6aadb3ee4fc3_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-24_fb80fadaab69031a80ff6aadb3ee4fc3_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
snojan
C2
-
http://wecan.hasthe.technology/upload
Targets
-
- Target 2026-08-24_fb80fadaab69031a80ff6aadb3ee4fc3_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 774KB
- SHA256 6a1cc80d6c101a8b823477cb6eae8de684f4c74b664c9e55c58bc1c68c1d53bc
- MD5 fb80fadaab69031a80ff6aadb3ee4fc3
- SHA1 cd256ad7434747866d65b9bcd6dab68e05c34220
- SHA512 d1a70fdf00f8708c640a3df0e555dd221be89c9c474d27fe1c73b83f1fb01922038518dc1c846adf5a767eb9a800f259c22b4461fe89497766ffcfdcc5268dad
- SSDEEP 24576:/Y+Fk70Trc18BSnLW2CRBKViu99LK1Rad6w:3kQTAKYS/v6h3+1uR
- TLSH T104F4122071C0C5B6D4B7013944D9CBB6AE76307247B994DBBADD63BAAF203E163352C9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
UPX dump on OEP (original entry point)