2026-08-30_fc81c5ffe05f4cede7e1018b97d3eec9_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee

General

Target
2026-08-30_fc81c5ffe05f4cede7e1018b97d3eec9_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
Size 1.0MB
Sample260831-abprcsbm7z
SHA256 1fb6b7f992ce6349f066d118592b5373c7339980df29cb96a5004292a53b2ff2
MD5 fc81c5ffe05f4cede7e1018b97d3eec9
SHA1 505d735361dc98e27943738e03d2f4cd97957db2
SHA512 d6258e93113aec8e2eff3ee50830373b484a202aef03db1bd09d1cc21dc1c474e359d487e69f8cbbd7e9864b6897d720408e5bb2ab5ce2a73d4745a62edb8f57
SSDEEP 24576:AkM07rcprWJNwV5EjcFUgWhkf0dpTrU8f85YbEkqu1wn8:AkZ7AxWHWSAFiksLTQ8c9lgw8
TLSH
T19235F128A788C077D026303888DBDF25777DB87503E5C6936A8D9BE53A103E16775ACA
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
sample	UPX

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-30_fc81c5ffe05f4cede7e1018b97d3eec9_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee

2026-08-30_fc81c5ffe05f4cede7e1018b97d3eec9_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee

.exe 1.0MB

SHA256 1fb6b7f992ce6349f066d118592b5373c7339980df29cb96a5004292a53b2ff2
MD5 fc81c5ffe05f4cede7e1018b97d3eec9
SHA1 505d735361dc98e27943738e03d2f4cd97957db2
SHA512 d6258e93113aec8e2eff3ee50830373b484a202aef03db1bd09d1cc21dc1c474e359d487e69f8cbbd7e9864b6897d720408e5bb2ab5ce2a73d4745a62edb8f57
SSDEEP 24576:AkM07rcprWJNwV5EjcFUgWhkf0dpTrU8f85YbEkqu1wn8:AkZ7AxWHWSAFiksLTQ8c9lgw8
TLSH
T19235F128A788C077D026303888DBDF25777DB87503E5C6936A8D9BE53A103E16775ACA
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

5

Entry point

52527

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths