General
- Target 2026-07-27_f24d1f968d9805f72df7a24393c431a2_coinminer_elex_rhadamanthys_stop
- Size 128KB
- Sample260727-m47tvs1vbt
- SHA256 4aa301335a905daf4155df127ca9f28c8e0998250891315940336b066487cf28
- MD5 f24d1f968d9805f72df7a24393c431a2
- SHA1 0fe4bf373e2021642c298ee7d19b392d82d0701b
- SHA512 ca675bd4839a67206e9158ede8cfd8b0c3872c0c65b37226207b2170f83d982ff407479046a0d3287c281af3d700e82a58641a4f4f9d7b0437068ab5d0c90f6d
- SSDEEP 1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+4K1xxKY+T6KWs:LJ0TAz6Mte4A+aaZx8EnCGVu4cnDKWs
- TLSH T133D3E120B2CB81F6E097527502DE9277AC3E10A6471EE6F7D6E476E3AD113F1B235089
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-27_f24d1f968d9805f72df7a24393c431a2_coinminer_elex_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-27_f24d1f968d9805f72df7a24393c431a2_coinminer_elex_rhadamanthys_stop.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
snojan
C2
-
http://wecan.hasthe.technology/upload
Targets
-
- Target 2026-07-27_f24d1f968d9805f72df7a24393c431a2_coinminer_elex_rhadamanthys_stop
- Size 128KB
- SHA256 4aa301335a905daf4155df127ca9f28c8e0998250891315940336b066487cf28
- MD5 f24d1f968d9805f72df7a24393c431a2
- SHA1 0fe4bf373e2021642c298ee7d19b392d82d0701b
- SHA512 ca675bd4839a67206e9158ede8cfd8b0c3872c0c65b37226207b2170f83d982ff407479046a0d3287c281af3d700e82a58641a4f4f9d7b0437068ab5d0c90f6d
- SSDEEP 1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+4K1xxKY+T6KWs:LJ0TAz6Mte4A+aaZx8EnCGVu4cnDKWs
- TLSH T133D3E120B2CB81F6E097527502DE9277AC3E10A6471EE6F7D6E476E3AD113F1B235089
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
UPX dump on OEP (original entry point)