General
- Target 2026-09-05_624bfda6f18de6177af0294e5e207544_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 448KB
- Sample260907-yz12asbb73
- SHA256 230861c0325e97c7ff145a5a95a47b8fff467c0540f5bd57ce4e56dedfca79b1
- MD5 624bfda6f18de6177af0294e5e207544
- SHA1 a686b643c21528d4e42221b28189b8361a2a3d62
- SHA512 4bab016122c1f3e362d1bef4721bb12701809ce302f08022d91ad483aeef24950d0ecc49e78e254ac6444990c1f0dac93c49d2d2270387e187b53c37a6daee92
- SSDEEP 12288:/bE+uyh1Lk70TnvjcsMxdABSnLHOr2fqRVs:/Y+lk70Trc18BSnLW2CRy
- TLSH T1A4A4022071C1C0B2D4BB113544EACA369E36707247B9D5DBBBDD67B66E202E1A3352CE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-09-05_624bfda6f18de6177af0294e5e207544_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-05_624bfda6f18de6177af0294e5e207544_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
snojan
C2
-
http://wecan.hasthe.technology/upload
Targets
-
- Target 2026-09-05_624bfda6f18de6177af0294e5e207544_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 448KB
- SHA256 230861c0325e97c7ff145a5a95a47b8fff467c0540f5bd57ce4e56dedfca79b1
- MD5 624bfda6f18de6177af0294e5e207544
- SHA1 a686b643c21528d4e42221b28189b8361a2a3d62
- SHA512 4bab016122c1f3e362d1bef4721bb12701809ce302f08022d91ad483aeef24950d0ecc49e78e254ac6444990c1f0dac93c49d2d2270387e187b53c37a6daee92
- SSDEEP 12288:/bE+uyh1Lk70TnvjcsMxdABSnLHOr2fqRVs:/Y+lk70Trc18BSnLW2CRy
- TLSH T1A4A4022071C1C0B2D4BB113544EACA369E36707247B9D5DBBBDD67B66E202E1A3352CE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
UPX dump on OEP (original entry point)