Extracted

• • Target
    2026-06-02_76d993bb6d1a7d12163d792dcc35aa32_coinminer_elex_redline-stealer_rhadamanthys_stop
  • Size 291KB
  • SHA256 be1838e75981cb38d83e3c4e550e4d156c48a60ce445854ab017f5f69ff6da6d
  • MD5 76d993bb6d1a7d12163d792dcc35aa32
  • SHA1 e0e3bc465a43607ce437f7c4aca95b2fdcc9eee5
  • SHA512 f4cb5c01f77291472a354518c9f7cbdfa716ec812fb178d0bc05620b412b75231699f5e3b8c4f376d067095b3dd14014719aaca3d9f0e911f8222ecc107bed4e
  • SSDEEP 3072:tJWhL0cgHsQB8BPFvdRcF8rFz1wxayNM3coteYnwrZwuhT7kr9+rY9:tghLWsQmpcF8BzXfwVTTIr9N
  • TLSH
    T1F7544A0272808071E7560B78045AE7A14ABE7D344BB5D68FF7A43B7A5E702D3A93721F
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  adwaredefense_evasiondiscoveryexecutionsystexpersistenceransomwarespywaretrojanupx

  • Family: Systex

    Systex is a trojan loader written in C++.

    trojansystex

  • Badlisted process makes network request

    Network request originating from process or tool commonly abused by malware.

  • Downloads MZ/PE file

  • Executes dropped EXE

  • Loads dropped DLL

  • Modifies boot configuration data using bcdedit

  • Suspicious use of NtSetInformationThreadHideFromDebugger

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1