General
- Target 2026-09-08_b50d6be3eb5ddc17d899d6354cfd9b5d_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 576KB
- Sample260908-qejyaa1cmd
- SHA256 12939b1b65c6acf8a26989ad6cd86ff4f8172833b7ae740ade9c50295d6bc879
- MD5 b50d6be3eb5ddc17d899d6354cfd9b5d
- SHA1 3994344f850d9a568c01ca0b396b33887ecf4b96
- SHA512 9121eacf744a51d2804e135dce0e580ea5f6600f86f7fb8634aba00f62161cbd7ec47b4e9b8c78fe6a1fb2acd960044ad4e28dc9ea2e47744225b9445cf59f56
- SSDEEP 12288:/bE+uSh1Lk70TnvjcsMxdABSnLHOr2fqRVnRj1wTV1:/Y+Vk70Trc18BSnLW2CRBKV1
- TLSH T179C4022071C1C077D4BB013544E9CA769A7630B247B995DBBBDC67BAAF202E1A3352CD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-09-08_b50d6be3eb5ddc17d899d6354cfd9b5d_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-08_b50d6be3eb5ddc17d899d6354cfd9b5d_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260710-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
snojan
C2
-
http://wecan.hasthe.technology/upload
Targets
-
- Target 2026-09-08_b50d6be3eb5ddc17d899d6354cfd9b5d_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 576KB
- SHA256 12939b1b65c6acf8a26989ad6cd86ff4f8172833b7ae740ade9c50295d6bc879
- MD5 b50d6be3eb5ddc17d899d6354cfd9b5d
- SHA1 3994344f850d9a568c01ca0b396b33887ecf4b96
- SHA512 9121eacf744a51d2804e135dce0e580ea5f6600f86f7fb8634aba00f62161cbd7ec47b4e9b8c78fe6a1fb2acd960044ad4e28dc9ea2e47744225b9445cf59f56
- SSDEEP 12288:/bE+uSh1Lk70TnvjcsMxdABSnLHOr2fqRVnRj1wTV1:/Y+Vk70Trc18BSnLW2CRBKV1
- TLSH T179C4022071C1C077D4BB013544E9CA769A7630B247B995DBBBDC67BAAF202E1A3352CD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
UPX dump on OEP (original entry point)