2026-09-03_c342a777652cf2e8132ecd3ecad7366a_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee

General

Target
2026-09-03_c342a777652cf2e8132ecd3ecad7366a_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
Size 677KB
Sample260903-3ddfbscb89
SHA256 c213a8c8519e5433d6b3287ea6fd023a45fa45d1ac6148bb7fdd9600e07a534e
MD5 c342a777652cf2e8132ecd3ecad7366a
SHA1 a359f46d96154870648d06fe95b6309330ed3912
SHA512 04a5de2270fb4c9a4c492ada7364b2fa33c9ce5e1f0c36cd0675f83aeb52bc5885536c5a98fc196991e87028311e037e56b86482f7700f3a97ee3a40e77d38f3
SSDEEP 12288:fAyZqbovn8NcLMLdEi6hcp+9J0EnYj5dLLPFXNxt1y/h7G8Tn7joNGH:DqbovkcgL2iS9J0EeXnPZNO7G8TPoUH
TLSH
T106E4CF14B6C5C0B3C477193044D6CE3AAA7D70B607A996D3BADC17AB6E513D0A3362CE
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
sample	UPX

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-03_c342a777652cf2e8132ecd3ecad7366a_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee

2026-09-03_c342a777652cf2e8132ecd3ecad7366a_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee

.exe 677KB

SHA256 c213a8c8519e5433d6b3287ea6fd023a45fa45d1ac6148bb7fdd9600e07a534e
MD5 c342a777652cf2e8132ecd3ecad7366a
SHA1 a359f46d96154870648d06fe95b6309330ed3912
SHA512 04a5de2270fb4c9a4c492ada7364b2fa33c9ce5e1f0c36cd0675f83aeb52bc5885536c5a98fc196991e87028311e037e56b86482f7700f3a97ee3a40e77d38f3
SSDEEP 12288:fAyZqbovn8NcLMLdEi6hcp+9J0EnYj5dLLPFXNxt1y/h7G8Tn7joNGH:DqbovkcgL2iS9J0EeXnPZNO7G8TPoUH
TLSH
T106E4CF14B6C5C0B3C477193044D6CE3AAA7D70B607A996D3BADC17AB6E513D0A3362CE
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

5

Entry point

52527

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths