General
- Target 2026-09-16_f6c4c4f82327a8f88309fc8e3dbc5a32_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 452KB
- Sample260916-sqgcmsbe22
- SHA256 c7da134ecdd25729899acd09d98405935c7aed0b0b774a7824ea61981819bf35
- MD5 f6c4c4f82327a8f88309fc8e3dbc5a32
- SHA1 07a689faaf495c74269468cbca276f0484199996
- SHA512 8b17fc430d9de59a976f317b9a8935ea2a346809a54b8f93e940990acb294b7bed14bb13d311a91474c77465ce24955a2f8c55ae0bd993cc6aed6842106d0c08
- SSDEEP 12288:/bE+ujh1Lk70TnvjcsMxdABSnLHOr2fqRV6:/Y+gk70Trc18BSnLW2CR0
- TLSH T136A4022071C1C0B2D4BB113544E9CA369E36707247B9D5DBBBDD67B6AE202E1A3352CE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-09-16_f6c4c4f82327a8f88309fc8e3dbc5a32_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260911-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-16_f6c4c4f82327a8f88309fc8e3dbc5a32_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260911-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
snojan
C2
-
http://wecan.hasthe.technology/upload
Targets
-
- Target 2026-09-16_f6c4c4f82327a8f88309fc8e3dbc5a32_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 452KB
- SHA256 c7da134ecdd25729899acd09d98405935c7aed0b0b774a7824ea61981819bf35
- MD5 f6c4c4f82327a8f88309fc8e3dbc5a32
- SHA1 07a689faaf495c74269468cbca276f0484199996
- SHA512 8b17fc430d9de59a976f317b9a8935ea2a346809a54b8f93e940990acb294b7bed14bb13d311a91474c77465ce24955a2f8c55ae0bd993cc6aed6842106d0c08
- SSDEEP 12288:/bE+ujh1Lk70TnvjcsMxdABSnLHOr2fqRV6:/Y+gk70Trc18BSnLW2CR0
- TLSH T136A4022071C1C0B2D4BB113544E9CA369E36707247B9D5DBBBDD67B6AE202E1A3352CE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
UPX dump on OEP (original entry point)