2026-08-29_f51ccc77d5201ccb1f6e4b7348ac0471_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee

General

Target
2026-08-29_f51ccc77d5201ccb1f6e4b7348ac0471_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
Size 2.0MB
Sample260830-3gn18ssbkb
SHA256 d53212c2bdfc5012a019d42b33e4e4fcbbf12023dd8b17ef50a158a0c67dbbad
MD5 f51ccc77d5201ccb1f6e4b7348ac0471
SHA1 a95f411cfc70642d9215e42f7258a5666c9ccd66
SHA512 e3a317a1054f32450ad734486331f6a7f20baca4a42efb596a10ec502d2e89fede62562241cbc0d367f6aaa7c0085021694b53e0d49631ce1cb3233d84f71a82
SSDEEP 49152:hAJsuEeMNYUM97dk5YAsi8zQ4hUSxlYFrhAcMBgCCJ:hAEMxHKsyg1ehIDk
TLSH
T1AC95121DB1C4C077F82711304CA5DE2179B8717693FE9AE77A8CABE5AA102D063366CD
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
sample	UPX

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-29_f51ccc77d5201ccb1f6e4b7348ac0471_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee

2026-08-29_f51ccc77d5201ccb1f6e4b7348ac0471_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee

.exe 2.0MB

SHA256 d53212c2bdfc5012a019d42b33e4e4fcbbf12023dd8b17ef50a158a0c67dbbad
MD5 f51ccc77d5201ccb1f6e4b7348ac0471
SHA1 a95f411cfc70642d9215e42f7258a5666c9ccd66
SHA512 e3a317a1054f32450ad734486331f6a7f20baca4a42efb596a10ec502d2e89fede62562241cbc0d367f6aaa7c0085021694b53e0d49631ce1cb3233d84f71a82
SSDEEP 49152:hAJsuEeMNYUM97dk5YAsi8zQ4hUSxlYFrhAcMBgCCJ:hAEMxHKsyg1ehIDk
TLSH
T1AC95121DB1C4C077F82711304CA5DE2179B8717693FE9AE77A8CABE5AA102D063366CD
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

5

Entry point

52527

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths