Analysis
- max time kernel
149s - max time network
145s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
- submitted
02/10/2026, 20:04
General
- Target 2026-10-01_0ed77f6e823c480acb9d7599787e0934_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
- Size 622KB
- Sample261002-ythb1a1y7m
- SHA256 5e503fd726891e220c21de5b28f1240768ec12e0efe32fca4ce2498fcb1ad35c
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-10-01_0ed77f6e823c480acb9d7599787e0934_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe"C:\Users\Admin\AppData\Local\Temp\2026-10-01_0ed77f6e823c480acb9d7599787e0934_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4540-0-0x0000000004C30000-0x0000000004C40000-memory.dmp
memory/4540-1-0x0000000004C40000-0x0000000004CD4000-memory.dmp
memory/4540-2-0x0000000004C30000-0x0000000004C40000-memory.dmp
memory/4540-3-0x0000000004CD0000-0x0000000005274000-memory.dmp
memory/4540-4-0x0000000005280000-0x0000000005312000-memory.dmp
memory/4540-5-0x0000000004C30000-0x0000000004C40000-memory.dmp
memory/4540-53-0x0000000005280000-0x000000000530D000-memory.dmp
memory/4540-43-0x0000000005280000-0x000000000530D000-memory.dmp
memory/4540-37-0x0000000005280000-0x000000000530D000-memory.dmp
memory/4540-29-0x0000000005280000-0x000000000530D000-memory.dmp
memory/4540-21-0x0000000005280000-0x000000000530D000-memory.dmp
memory/4540-11-0x0000000005280000-0x000000000530D000-memory.dmp
memory/4540-59-0x0000000005280000-0x000000000530D000-memory.dmp
memory/4540-123-0x0000000005280000-0x000000000530D000-memory.dmp
memory/4540-131-0x0000000005280000-0x000000000530D000-memory.dmp
memory/4540-129-0x0000000005280000-0x000000000530D000-memory.dmp
memory/4540-127-0x0000000005280000-0x000000000530D000-memory.dmp
memory/4540-438-0x00000000054C0000-0x0000000005552000-memory.dmp
memory/4540-125-0x0000000005280000-0x000000000530D000-memory.dmp
memory/4540-121-0x0000000005280000-0x000000000530D000-memory.dmp
memory/4540-119-0x0000000005280000-0x000000000530D000-memory.dmp
memory/4540-117-0x0000000005280000-0x000000000530D000-memory.dmp
memory/4540-115-0x0000000005280000-0x000000000530D000-memory.dmp
memory/4540-111-0x0000000005280000-0x000000000530D000-memory.dmp
memory/4540-109-0x0000000005280000-0x000000000530D000-memory.dmp
memory/4540-107-0x0000000005280000-0x000000000530D000-memory.dmp
memory/4540-105-0x0000000005280000-0x000000000530D000-memory.dmp
memory/4540-103-0x0000000005280000-0x000000000530D000-memory.dmp
memory/4540-101-0x0000000005280000-0x000000000530D000-memory.dmp
memory/4540-99-0x0000000005280000-0x000000000530D000-memory.dmp
memory/4540-97-0x0000000005280000-0x000000000530D000-memory.dmp
memory/4540-95-0x0000000005280000-0x000000000530D000-memory.dmp
memory/4540-93-0x0000000005280000-0x000000000530D000-memory.dmp
memory/4540-91-0x0000000005280000-0x000000000530D000-memory.dmp
memory/4540-89-0x0000000005280000-0x000000000530D000-memory.dmp
memory/4540-87-0x0000000005280000-0x000000000530D000-memory.dmp
memory/4540-85-0x0000000005280000-0x000000000530D000-memory.dmp
memory/4540-113-0x0000000005280000-0x000000000530D000-memory.dmp
memory/4540-83-0x0000000005280000-0x000000000530D000-memory.dmp
memory/4540-81-0x0000000005280000-0x000000000530D000-memory.dmp
memory/4540-77-0x0000000005280000-0x000000000530D000-memory.dmp
memory/4540-75-0x0000000005280000-0x000000000530D000-memory.dmp
memory/4540-73-0x0000000005280000-0x000000000530D000-memory.dmp
memory/4540-71-0x0000000005280000-0x000000000530D000-memory.dmp
memory/4540-69-0x0000000005280000-0x000000000530D000-memory.dmp
memory/4540-67-0x0000000005280000-0x000000000530D000-memory.dmp
memory/4540-65-0x0000000005280000-0x000000000530D000-memory.dmp
memory/4540-64-0x0000000005280000-0x000000000530D000-memory.dmp
memory/4540-57-0x0000000005280000-0x000000000530D000-memory.dmp
memory/4540-55-0x0000000005280000-0x000000000530D000-memory.dmp
memory/4540-51-0x0000000005280000-0x000000000530D000-memory.dmp
memory/4540-49-0x0000000005280000-0x000000000530D000-memory.dmp
memory/4540-48-0x0000000005280000-0x000000000530D000-memory.dmp
memory/4540-45-0x0000000005280000-0x000000000530D000-memory.dmp
memory/4540-41-0x0000000005280000-0x000000000530D000-memory.dmp
memory/4540-40-0x0000000005280000-0x000000000530D000-memory.dmp
memory/4540-35-0x0000000005280000-0x000000000530D000-memory.dmp
memory/4540-34-0x0000000005280000-0x000000000530D000-memory.dmp
memory/4540-31-0x0000000005280000-0x000000000530D000-memory.dmp
memory/4540-27-0x0000000005280000-0x000000000530D000-memory.dmp
memory/4540-25-0x0000000005280000-0x000000000530D000-memory.dmp
memory/4540-24-0x0000000005280000-0x000000000530D000-memory.dmp
memory/4540-19-0x0000000005280000-0x000000000530D000-memory.dmp
memory/4540-17-0x0000000005280000-0x000000000530D000-memory.dmp
memory/4540-15-0x0000000005280000-0x000000000530D000-memory.dmp
memory/4540-14-0x0000000005280000-0x000000000530D000-memory.dmp
memory/4540-79-0x0000000005280000-0x000000000530D000-memory.dmp
memory/4540-9-0x0000000005280000-0x000000000530D000-memory.dmp
memory/4540-7-0x0000000005280000-0x000000000530D000-memory.dmp
memory/4540-6-0x0000000005280000-0x000000000530D000-memory.dmp
memory/4540-61-0x0000000005280000-0x000000000530D000-memory.dmp
memory/4540-439-0x0000000004C30000-0x0000000004C40000-memory.dmp
memory/4540-440-0x0000000004C30000-0x0000000004C40000-memory.dmp