General
- Target 2026-07-13_403c619565f250d7e291c32474938c21_coinminer_elex_redline-stealer_rhadamanthys_stop
- Size 291KB
- Sample260714-bw8weaet7w
- SHA256 5cd7710c1d85681d637b152937455e8f3c13ada6197f132fd50c4a6d290630d5
- MD5 403c619565f250d7e291c32474938c21
- SHA1 d24d42773b43c92b1c6df6b59ffccd5085e412b3
- SHA512 d8089dc3fece1a6be78783c62765837e1add9e5378393b56e7ba4c2da7a8790f68f48c807217f379ad215659f8a0ce98600ea5afce77b08ab2513cd1eeb558c6
- SSDEEP 3072:RJWhL0cgHsQB8BPFvdRcF8rFz1wxayNM3coteYnwrZwuhT7kr6+rY9:RghLWsQmpcF8BzXfwVTTIr6N
- TLSH T109544A1172808071E7560B78045AE7A14A7E7D340BB5D68FF7A83B7A5E702D3A93721F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-13_403c619565f250d7e291c32474938c21_coinminer_elex_redline-stealer_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Malware Config
Extracted
Family
-
systex
C2
-
http://xytets.com:2345/t.asp?os=wangba8102
-
http://xytets.com:2345/ll/out.txt
-
http://xytets.com:2345/t.asp?os=home8102
Targets
-
- Target 2026-07-13_403c619565f250d7e291c32474938c21_coinminer_elex_redline-stealer_rhadamanthys_stop
- Size 291KB
- SHA256 5cd7710c1d85681d637b152937455e8f3c13ada6197f132fd50c4a6d290630d5
- MD5 403c619565f250d7e291c32474938c21
- SHA1 d24d42773b43c92b1c6df6b59ffccd5085e412b3
- SHA512 d8089dc3fece1a6be78783c62765837e1add9e5378393b56e7ba4c2da7a8790f68f48c807217f379ad215659f8a0ce98600ea5afce77b08ab2513cd1eeb558c6
- SSDEEP 3072:RJWhL0cgHsQB8BPFvdRcF8rFz1wxayNM3coteYnwrZwuhT7kr6+rY9:RghLWsQmpcF8BzXfwVTTIr6N
- TLSH T109544A1172808071E7560B78045AE7A14A7E7D340BB5D68FF7A83B7A5E702D3A93721F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE