General
- Target 2026-09-16_d8a714b5ab349a8a5c619643c5f1911c_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 46.2MB
- Sample260916-klqfravzhx
- SHA256 7cf5a98b9a4affcd7abc50be55c1678784f0956703d883e6ef85478325aae16e
- MD5 d8a714b5ab349a8a5c619643c5f1911c
- SHA1 0ee96c3f353e5d682ba09a2882481193b4cfc9f7
- SHA512 8f0e9f0829e643c70ae7c1fdcaf825779eb1a6d4ee16292a1fd7e17d93cc60e99114355f4de8aded1eef71eb9d1a8300921d513d0b4f100e7a674662e4b63b91
- SSDEEP 786432:tDp7PPUxFTYWBUFm1+HrdOdsH8e1UVCg7VdGFWoW1+6fqIxVlS9upxnE/0p0GJ6y:t1LPoFTjBUFm1+HnUx/GMBXfjxVlLQ/G
- TLSH T169B733838B152562C4D824B8596EC16C7C4960BF62BA45C7F2CE6EC33F31C593466AAF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-16_d8a714b5ab349a8a5c619643c5f1911c_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260911-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-16_d8a714b5ab349a8a5c619643c5f1911c_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260911-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-16_d8a714b5ab349a8a5c619643c5f1911c_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 46.2MB
- SHA256 7cf5a98b9a4affcd7abc50be55c1678784f0956703d883e6ef85478325aae16e
- MD5 d8a714b5ab349a8a5c619643c5f1911c
- SHA1 0ee96c3f353e5d682ba09a2882481193b4cfc9f7
- SHA512 8f0e9f0829e643c70ae7c1fdcaf825779eb1a6d4ee16292a1fd7e17d93cc60e99114355f4de8aded1eef71eb9d1a8300921d513d0b4f100e7a674662e4b63b91
- SSDEEP 786432:tDp7PPUxFTYWBUFm1+HrdOdsH8e1UVCg7VdGFWoW1+6fqIxVlS9upxnE/0p0GJ6y:t1LPoFTjBUFm1+HnUx/GMBXfjxVlLQ/G
- TLSH T169B733838B152562C4D824B8596EC16C7C4960BF62BA45C7F2CE6EC33F31C593466AAF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables packed with unregistered version of .NET Reactor
-
.NET Reactor proctector
Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.