General
- Target 2026-07-19_0ec428ac8945cbc4cb821bf4b956e93c_coinminer_elex_redline-stealer_rhadamanthys_stop
- Size 291KB
- Sample260719-3mn87aaz9v
- SHA256 c216df7b10fbfd4522766f6fa20bd130fc8129ca4573757d39513bc270e84643
- MD5 0ec428ac8945cbc4cb821bf4b956e93c
- SHA1 1d31ef3d5381e31103530b4b9f0c2298745a6daa
- SHA512 f07af514d3230498ec3b48908a99d20873c618517f104943443da3063ed12399f2e41bbd28c877606448795df1548c055ce4f89789a04415805b0884f80be219
- SSDEEP 3072:sJWhL0cgHsQB8BPFvdRcF8rFz1wxayNM3coteYnwrZwuhT7kr6+rY9:sghLWsQmpcF8BzXfwVTTIr6N
- TLSH T1A6544A0272808071E7560B78045AE7A14ABE7D344BB5D68FF7A43B7A5E702D3A93721F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-19_0ec428ac8945cbc4cb821bf4b956e93c_coinminer_elex_redline-stealer_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Malware Config
Extracted
Family
-
systex
C2
-
http://xytets.com:2345/t.asp?os=wangba8102
-
http://xytets.com:2345/ll/out.txt
-
http://xytets.com:2345/t.asp?os=home8102
Targets
-
- Target 2026-07-19_0ec428ac8945cbc4cb821bf4b956e93c_coinminer_elex_redline-stealer_rhadamanthys_stop
- Size 291KB
- SHA256 c216df7b10fbfd4522766f6fa20bd130fc8129ca4573757d39513bc270e84643
- MD5 0ec428ac8945cbc4cb821bf4b956e93c
- SHA1 1d31ef3d5381e31103530b4b9f0c2298745a6daa
- SHA512 f07af514d3230498ec3b48908a99d20873c618517f104943443da3063ed12399f2e41bbd28c877606448795df1548c055ce4f89789a04415805b0884f80be219
- SSDEEP 3072:sJWhL0cgHsQB8BPFvdRcF8rFz1wxayNM3coteYnwrZwuhT7kr6+rY9:sghLWsQmpcF8BzXfwVTTIr6N
- TLSH T1A6544A0272808071E7560B78045AE7A14ABE7D344BB5D68FF7A43B7A5E702D3A93721F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE