General
- Target 2026-06-03_5088a008485aed7943638d18e02655fc_coinminer_elex_rhadamanthys_smoke-loader_stealc_stop
- Size 159KB
- Sample260603-tgvpcact9k
- SHA256 ec688a6882c14efaf367f652ed3bd09f9b4ab8efef8c711491259fffd48af3f1
- MD5 5088a008485aed7943638d18e02655fc
- SHA1 133a08aea4c449cf8115153f3d0f509f8c84ad2c
- SHA512 25adba051d3febefea2ca586d63fb90f4665c029bc208e20700a2fe03ee8deccc8b1d433ef9faf6a3a663be93c4dacb11e92fd1a9d90a81789250ada512c2af3
- SSDEEP 3072:LJ0TAz6Mte4A+aaZx8EnCGVuUcnDKW1LgppI:NrFZaaZmEJuzDKW1Lg4
- TLSH T179F3D020A2C2C0B6D4976175426E87739D7D1072072EE6E7E7E636B29E213F1F23618D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-06-03_5088a008485aed7943638d18e02655fc_coinminer_elex_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-03_5088a008485aed7943638d18e02655fc_coinminer_elex_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win11-20260513-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
snojan
C2
-
http://wecan.hasthe.technology/upload
Targets
-
- Target 2026-06-03_5088a008485aed7943638d18e02655fc_coinminer_elex_rhadamanthys_smoke-loader_stealc_stop
- Size 159KB
- SHA256 ec688a6882c14efaf367f652ed3bd09f9b4ab8efef8c711491259fffd48af3f1
- MD5 5088a008485aed7943638d18e02655fc
- SHA1 133a08aea4c449cf8115153f3d0f509f8c84ad2c
- SHA512 25adba051d3febefea2ca586d63fb90f4665c029bc208e20700a2fe03ee8deccc8b1d433ef9faf6a3a663be93c4dacb11e92fd1a9d90a81789250ada512c2af3
- SSDEEP 3072:LJ0TAz6Mte4A+aaZx8EnCGVuUcnDKW1LgppI:NrFZaaZmEJuzDKW1Lg4
- TLSH T179F3D020A2C2C0B6D4976175426E87739D7D1072072EE6E7E7E636B29E213F1F23618D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
UPX dump on OEP (original entry point)