Analysis
- max time kernel
149s - max time network
134s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
- submitted
16/10/2026, 22:45
General
- Target 2026-10-15_13a96efe38293292aac3e467dcee2668_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
- Size 1.2MB
- Sample261016-2pjaaastds
- SHA256 e4d5f7f85b60e1f5b7966d56f87e9b77b263032318a5ec449dbb9c5178105f2b
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-10-15_13a96efe38293292aac3e467dcee2668_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe"C:\Users\Admin\AppData\Local\Temp\2026-10-15_13a96efe38293292aac3e467dcee2668_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
memory/264-0-0x0000000074FA2000-0x0000000074FA3000-memory.dmp
memory/264-1-0x00000000050A0000-0x00000000051FA000-memory.dmp
memory/264-2-0x0000000074F90000-0x000000007574C000-memory.dmp
memory/264-3-0x0000000005200000-0x00000000057BA000-memory.dmp
memory/264-4-0x0000000004F40000-0x0000000005098000-memory.dmp
memory/264-5-0x00000000057C0000-0x000000000585C000-memory.dmp
memory/264-6-0x0000000004F40000-0x0000000005092000-memory.dmp
memory/264-7-0x0000000004F40000-0x0000000005092000-memory.dmp
memory/264-70-0x0000000004F40000-0x0000000005092000-memory.dmp
memory/264-85-0x0000000004F40000-0x0000000005092000-memory.dmp
memory/264-91-0x0000000004F40000-0x0000000005092000-memory.dmp
memory/264-133-0x0000000004F40000-0x0000000005092000-memory.dmp
memory/264-131-0x0000000004F40000-0x0000000005092000-memory.dmp
memory/264-129-0x0000000004F40000-0x0000000005092000-memory.dmp
memory/264-127-0x0000000004F40000-0x0000000005092000-memory.dmp
memory/264-125-0x0000000004F40000-0x0000000005092000-memory.dmp
memory/264-123-0x0000000004F40000-0x0000000005092000-memory.dmp
memory/264-121-0x0000000004F40000-0x0000000005092000-memory.dmp
memory/264-119-0x0000000004F40000-0x0000000005092000-memory.dmp
memory/264-117-0x0000000004F40000-0x0000000005092000-memory.dmp
memory/264-115-0x0000000004F40000-0x0000000005092000-memory.dmp
memory/264-113-0x0000000004F40000-0x0000000005092000-memory.dmp
memory/264-111-0x0000000004F40000-0x0000000005092000-memory.dmp
memory/264-109-0x0000000004F40000-0x0000000005092000-memory.dmp
memory/264-107-0x0000000004F40000-0x0000000005092000-memory.dmp
memory/264-105-0x0000000004F40000-0x0000000005092000-memory.dmp
memory/264-103-0x0000000004F40000-0x0000000005092000-memory.dmp
memory/264-101-0x0000000004F40000-0x0000000005092000-memory.dmp
memory/264-99-0x0000000004F40000-0x0000000005092000-memory.dmp
memory/264-97-0x0000000004F40000-0x0000000005092000-memory.dmp
memory/264-95-0x0000000004F40000-0x0000000005092000-memory.dmp
memory/264-93-0x0000000004F40000-0x0000000005092000-memory.dmp
memory/264-89-0x0000000004F40000-0x0000000005092000-memory.dmp
memory/264-87-0x0000000004F40000-0x0000000005092000-memory.dmp
memory/264-83-0x0000000004F40000-0x0000000005092000-memory.dmp
memory/264-82-0x0000000004F40000-0x0000000005092000-memory.dmp
memory/264-77-0x0000000004F40000-0x0000000005092000-memory.dmp
memory/264-74-0x0000000004F40000-0x0000000005092000-memory.dmp
memory/264-79-0x0000000004F40000-0x0000000005092000-memory.dmp
memory/264-72-0x0000000004F40000-0x0000000005092000-memory.dmp
memory/264-69-0x0000000004F40000-0x0000000005092000-memory.dmp
memory/264-66-0x0000000004F40000-0x0000000005092000-memory.dmp
memory/264-62-0x0000000004F40000-0x0000000005092000-memory.dmp
memory/264-58-0x0000000004F40000-0x0000000005092000-memory.dmp
memory/264-56-0x0000000004F40000-0x0000000005092000-memory.dmp
memory/264-54-0x0000000004F40000-0x0000000005092000-memory.dmp
memory/264-52-0x0000000004F40000-0x0000000005092000-memory.dmp
memory/264-50-0x0000000004F40000-0x0000000005092000-memory.dmp
memory/264-48-0x0000000004F40000-0x0000000005092000-memory.dmp
memory/264-46-0x0000000004F40000-0x0000000005092000-memory.dmp
memory/264-44-0x0000000004F40000-0x0000000005092000-memory.dmp
memory/264-42-0x0000000004F40000-0x0000000005092000-memory.dmp
memory/264-40-0x0000000004F40000-0x0000000005092000-memory.dmp
memory/264-38-0x0000000004F40000-0x0000000005092000-memory.dmp
memory/264-75-0x0000000074F90000-0x000000007574C000-memory.dmp
memory/264-64-0x0000000004F40000-0x0000000005092000-memory.dmp
memory/264-60-0x0000000004F40000-0x0000000005092000-memory.dmp
memory/264-36-0x0000000004F40000-0x0000000005092000-memory.dmp
memory/264-34-0x0000000004F40000-0x0000000005092000-memory.dmp
memory/264-33-0x0000000004F40000-0x0000000005092000-memory.dmp
memory/264-29-0x0000000004F40000-0x0000000005092000-memory.dmp
memory/264-27-0x0000000004F40000-0x0000000005092000-memory.dmp
memory/264-25-0x0000000004F40000-0x0000000005092000-memory.dmp
memory/264-23-0x0000000004F40000-0x0000000005092000-memory.dmp
memory/264-21-0x0000000004F40000-0x0000000005092000-memory.dmp
memory/264-19-0x0000000004F40000-0x0000000005092000-memory.dmp
memory/264-17-0x0000000004F40000-0x0000000005092000-memory.dmp
memory/264-15-0x0000000004F40000-0x0000000005092000-memory.dmp
memory/264-13-0x0000000004F40000-0x0000000005092000-memory.dmp
memory/264-9-0x0000000004F40000-0x0000000005092000-memory.dmp
memory/264-32-0x0000000074F90000-0x000000007574C000-memory.dmp
memory/264-11-0x0000000004F40000-0x0000000005092000-memory.dmp
memory/264-1904-0x0000000005970000-0x0000000005A02000-memory.dmp
memory/264-1905-0x0000000074F90000-0x000000007574C000-memory.dmp
memory/264-1906-0x0000000005930000-0x000000000593A000-memory.dmp
memory/264-1907-0x0000000005A10000-0x0000000005A66000-memory.dmp
memory/264-1908-0x000000000B770000-0x000000000B8E4000-memory.dmp
memory/264-1909-0x0000000074FA2000-0x0000000074FA3000-memory.dmp
memory/264-1910-0x0000000074F90000-0x000000007574C000-memory.dmp
memory/264-1911-0x0000000074F90000-0x000000007574C000-memory.dmp
memory/264-1912-0x0000000074F90000-0x000000007574C000-memory.dmp
memory/264-1913-0x0000000074F90000-0x000000007574C000-memory.dmp
memory/264-1914-0x0000000074F90000-0x000000007574C000-memory.dmp
memory/264-1915-0x0000000074F90000-0x000000007574C000-memory.dmp