General
- Target 2026-05-09_95ae2fb35847cc5441d31cfcfc386953_coinminer_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 192KB
- Sample260509-mmcmdsfs5t
- SHA256 090b2987cb0be8dcca4658cd59662c45a54dfd875461cb741ffac98324ce336b
- MD5 95ae2fb35847cc5441d31cfcfc386953
- SHA1 6edfda771fe5bd71c16c8ffacac3d5915d897f5a
- SHA512 012023c3376e6ebe1d6945b386fa5250213d49abf34076f47b17f91079da4be342a133535fb22680f57f831715b47d9d847ce1983489cb890f86f5637fbf36a9
- SSDEEP 3072:LJ0TAz6Mte4A+aaZx8EnCGVuPcnDKW1LgppLRHMY0G:NrFZaaZmEJuEDKW1Lgbdl0G
- TLSH T13C14D12472C2C1B3C49721754169CB76AE7D5072033EE6DBE7E62AB26E213E1E33518D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-05-09_95ae2fb35847cc5441d31cfcfc386953_coinminer_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260130-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-09_95ae2fb35847cc5441d31cfcfc386953_coinminer_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win11-20260130-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
snojan
C2
-
http://wecan.hasthe.technology/upload
Targets
-
- Target 2026-05-09_95ae2fb35847cc5441d31cfcfc386953_coinminer_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 192KB
- SHA256 090b2987cb0be8dcca4658cd59662c45a54dfd875461cb741ffac98324ce336b
- MD5 95ae2fb35847cc5441d31cfcfc386953
- SHA1 6edfda771fe5bd71c16c8ffacac3d5915d897f5a
- SHA512 012023c3376e6ebe1d6945b386fa5250213d49abf34076f47b17f91079da4be342a133535fb22680f57f831715b47d9d847ce1983489cb890f86f5637fbf36a9
- SSDEEP 3072:LJ0TAz6Mte4A+aaZx8EnCGVuPcnDKW1LgppLRHMY0G:NrFZaaZmEJuEDKW1Lgbdl0G
- TLSH T13C14D12472C2C1B3C49721754169CB76AE7D5072033EE6DBE7E62AB26E213E1E33518D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
UPX dump on OEP (original entry point)