General
- Target 2026-07-29_c81057816247d9e9d6a18bf98141dbbd_coinminer_elex_rhadamanthys_stop
- Size 144KB
- Sample260729-15979stdre
- SHA256 4d56238d29d3fa62b4f54f96d6227859d2b72afcdd625c0c0bfa3e1f1695b0da
- MD5 c81057816247d9e9d6a18bf98141dbbd
- SHA1 a217548d57e44143a69c90db9741e3f8b0c92ebd
- SHA512 4f2a41e5e6b599f81aa2a563c29fd729175480fa2e85121a6aa7ac9eec5b527374624b70146ab2b98ebac7069ddb3296e64929093497ada693f6768b5660829a
- SSDEEP 1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+tK1xxKY+T6KWl:LJ0TAz6Mte4A+aaZx8EnCGVutcnDKW1P
- TLSH T1DFE3E120A2D680F2D493627502AD82779D3E1077072EE6E7D7E576A3AD213F1F23618D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-29_c81057816247d9e9d6a18bf98141dbbd_coinminer_elex_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-29_c81057816247d9e9d6a18bf98141dbbd_coinminer_elex_rhadamanthys_stop.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
snojan
C2
-
http://wecan.hasthe.technology/upload
Targets
-
- Target 2026-07-29_c81057816247d9e9d6a18bf98141dbbd_coinminer_elex_rhadamanthys_stop
- Size 144KB
- SHA256 4d56238d29d3fa62b4f54f96d6227859d2b72afcdd625c0c0bfa3e1f1695b0da
- MD5 c81057816247d9e9d6a18bf98141dbbd
- SHA1 a217548d57e44143a69c90db9741e3f8b0c92ebd
- SHA512 4f2a41e5e6b599f81aa2a563c29fd729175480fa2e85121a6aa7ac9eec5b527374624b70146ab2b98ebac7069ddb3296e64929093497ada693f6768b5660829a
- SSDEEP 1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+tK1xxKY+T6KWl:LJ0TAz6Mte4A+aaZx8EnCGVutcnDKW1P
- TLSH T1DFE3E120A2D680F2D493627502AD82779D3E1077072EE6E7D7E576A3AD213F1F23618D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
UPX dump on OEP (original entry point)