General
- Target 2026-09-01_8f1e33a822dfa34836b6bee3afb4cacd_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 175KB
- Sample260902-ldyylayena
- SHA256 6623aa3af2eb360b6899482f077ed2942e3a3c51d4e263725b7bcb8b484762a5
- MD5 8f1e33a822dfa34836b6bee3afb4cacd
- SHA1 cd16a071ca53174f0a2362725a079e234f461892
- SHA512 50215361ecd274b0f5864998e62755a0df042c53e63e65fdc08a7220571f798afd6be14d0efaa30671e92af8830e850e4d69645e18cec525e936c58557d9f658
- SSDEEP 3072:pDKW1LgppLRHMY0TBfJvjcTp5XZpa8nqeo7Qbeues6Y:pDKW1Lgbdl0TBBvjc/S81Sues
- TLSH T133049D2171C1C1B3D4B7153444EACA795A7A30320B7A96D7B7DC1BBA6F212E1A3352CE
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-01_8f1e33a822dfa34836b6bee3afb4cacd_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-01_8f1e33a822dfa34836b6bee3afb4cacd_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 175KB
- SHA256 6623aa3af2eb360b6899482f077ed2942e3a3c51d4e263725b7bcb8b484762a5
- MD5 8f1e33a822dfa34836b6bee3afb4cacd
- SHA1 cd16a071ca53174f0a2362725a079e234f461892
- SHA512 50215361ecd274b0f5864998e62755a0df042c53e63e65fdc08a7220571f798afd6be14d0efaa30671e92af8830e850e4d69645e18cec525e936c58557d9f658
- SSDEEP 3072:pDKW1LgppLRHMY0TBfJvjcTp5XZpa8nqeo7Qbeues6Y:pDKW1Lgbdl0TBBvjc/S81Sues
- TLSH T133049D2171C1C1B3D4B7153444EACA795A7A30320B7A96D7B7DC1BBA6F212E1A3352CE
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Healer an antivirus disabler dropper
-
Modifies Windows Defender Real-time Protection settings
-
Modifies Windows Defender notification settings
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Windows security modification