General
- Target 2026-07-31_fc2ae71196779cd94418bf9adec61114_coinminer_elex_rhadamanthys_stop
- Size 128KB
- Sample260731-mrebsagg96
- SHA256 1cdc5f09abf994387f73288d1a2b48161ff1250ae7d1f0b8cfe1d61cf2a339cc
- MD5 fc2ae71196779cd94418bf9adec61114
- SHA1 c06b80e73677bbc810c69d5e64d36280b94c4e56
- SHA512 79c4f8db0be5a8c8f078605d931f517d96e53e651692c572349fdb498d8716a4612b3f088f21f756c2ffcba609c6203919d78235fcb0bc16e600a2d256266d1d
- SSDEEP 1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+6K1xxKY+T6KWs:LJ0TAz6Mte4A+aaZx8EnCGVu6cnDKWs
- TLSH T191D3E120B2CB81F6E097527502DE9277AC3E10A6471EE6F7D6E476E3AD113F1B235089
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-31_fc2ae71196779cd94418bf9adec61114_coinminer_elex_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-31_fc2ae71196779cd94418bf9adec61114_coinminer_elex_rhadamanthys_stop.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
snojan
C2
-
http://wecan.hasthe.technology/upload
Targets
-
- Target 2026-07-31_fc2ae71196779cd94418bf9adec61114_coinminer_elex_rhadamanthys_stop
- Size 128KB
- SHA256 1cdc5f09abf994387f73288d1a2b48161ff1250ae7d1f0b8cfe1d61cf2a339cc
- MD5 fc2ae71196779cd94418bf9adec61114
- SHA1 c06b80e73677bbc810c69d5e64d36280b94c4e56
- SHA512 79c4f8db0be5a8c8f078605d931f517d96e53e651692c572349fdb498d8716a4612b3f088f21f756c2ffcba609c6203919d78235fcb0bc16e600a2d256266d1d
- SSDEEP 1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+6K1xxKY+T6KWs:LJ0TAz6Mte4A+aaZx8EnCGVu6cnDKWs
- TLSH T191D3E120B2CB81F6E097527502DE9277AC3E10A6471EE6F7D6E476E3AD113F1B235089
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
UPX dump on OEP (original entry point)