General

  • Target
    2026-07-30_478858b26ac6d1d0a7891540398355dd_coinminer_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
  • Size 176KB
  • Sample260730-x7jasaee27
  • SHA256 94f8be37c6b436ef964ca8d00a8823d9ee2874fb72a6f3c5d4149b9985f14eab
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Extracted

Family
  • snojan

C2
  • http://wecan.hasthe.technology/upload

Targets

    • Target
      2026-07-30_478858b26ac6d1d0a7891540398355dd_coinminer_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
    • Size 176KB
    • SHA256 94f8be37c6b436ef964ca8d00a8823d9ee2874fb72a6f3c5d4149b9985f14eab
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Family: Snojan

      Snojan is a downloader used to drop and execute other malware.

    • UPX dump on OEP (original entry point)

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v16

Tasks