2026-09-16_781bcd366a231e98713381b9789be9c4_coinminer_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee

General

Target
2026-09-16_781bcd366a231e98713381b9789be9c4_coinminer_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
Size 509KB
Sample260916-npklfsag24
SHA256 bfdbbe70943b6f2f4f3ef9192dee3da8d7b6327de1b7d34cfbf92ecd662ecba8
MD5 781bcd366a231e98713381b9789be9c4
SHA1 65b2ce3c210d6ccad0f9885990437c4fa8a2513c
SHA512 ed0c89a7146d047668089d4c62cd8b36a5659f4b2eb0c63e81dc79ca8126df498cd9f936a2f52af2cf79fb066973803df2ff997f44070da55c6f483c86c94b8d
SSDEEP 6144:cKKWqPgbne0KxxnaaZgEJldpKW2Rgbhj0NYpnaaZ4EJxVtKW4ZgbEb0s:HhqPke0cxa+lXh2Rkl0Ixy+xzh4Zkq0s
TLSH
T102B4C024B5C1C0B3D4876530416A9F76BE7D5076032EE6D7EBD62AB26E203E1E33918D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
sample	UPX

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-16_781bcd366a231e98713381b9789be9c4_coinminer_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee

2026-09-16_781bcd366a231e98713381b9789be9c4_coinminer_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee

.exe 509KB

SHA256 bfdbbe70943b6f2f4f3ef9192dee3da8d7b6327de1b7d34cfbf92ecd662ecba8
MD5 781bcd366a231e98713381b9789be9c4
SHA1 65b2ce3c210d6ccad0f9885990437c4fa8a2513c
SHA512 ed0c89a7146d047668089d4c62cd8b36a5659f4b2eb0c63e81dc79ca8126df498cd9f936a2f52af2cf79fb066973803df2ff997f44070da55c6f483c86c94b8d
SSDEEP 6144:cKKWqPgbne0KxxnaaZgEJldpKW2Rgbhj0NYpnaaZ4EJxVtKW4ZgbEb0s:HhqPke0cxa+lXh2Rkl0Ixy+xzh4Zkq0s
TLSH
T102B4C024B5C1C0B3D4876530416A9F76BE7D5076032EE6D7EBD62AB26E203E1E33918D
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

5

Entry point

52527

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths