General
- Target 2026-09-13_94ca0a18049c6703990bae0b1099d077_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 368KB
- Sample260913-pm2bvsgl9w
- SHA256 86d8111a1dad3310e9a5c8048307565d2cd263b1f92abd37189f627a6d72b9b4
- MD5 94ca0a18049c6703990bae0b1099d077
- SHA1 e02393955df388754a06fb82a25a7d1d67be2a88
- SHA512 c08b5c825f4c5bb027a3768b577b1f8f205f7ab3e6376ef968b98b76a70f2c673e73cf0b399e211c714ad72953d2db745fc3b8fdd6d651dee81147107a3646d7
- SSDEEP 6144:NrFZaaZmEJukDKW1Lgbdl0TBBvjc/YVM66dAFlJTSRUYzLY6hOfvb2wh:/bE+uyh1Lk70TnvjcsMxdABSnLHOr26
- TLSH T11284F12071C0C1B2D4BB113544EACA769A76707207B9D5DBBBDC27BAAE113E163352CE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-09-13_94ca0a18049c6703990bae0b1099d077_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260911-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-13_94ca0a18049c6703990bae0b1099d077_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260911-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
snojan
C2
-
http://wecan.hasthe.technology/upload
Targets
-
- Target 2026-09-13_94ca0a18049c6703990bae0b1099d077_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 368KB
- SHA256 86d8111a1dad3310e9a5c8048307565d2cd263b1f92abd37189f627a6d72b9b4
- MD5 94ca0a18049c6703990bae0b1099d077
- SHA1 e02393955df388754a06fb82a25a7d1d67be2a88
- SHA512 c08b5c825f4c5bb027a3768b577b1f8f205f7ab3e6376ef968b98b76a70f2c673e73cf0b399e211c714ad72953d2db745fc3b8fdd6d651dee81147107a3646d7
- SSDEEP 6144:NrFZaaZmEJukDKW1Lgbdl0TBBvjc/YVM66dAFlJTSRUYzLY6hOfvb2wh:/bE+uyh1Lk70TnvjcsMxdABSnLHOr26
- TLSH T11284F12071C0C1B2D4BB113544EACA769A76707207B9D5DBBBDC27BAAE113E163352CE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
UPX dump on OEP (original entry point)