General
- Target 2026-08-02_e4d8bff4fbb1296dd1cae6bfc194a434_coinminer_elex_rhadamanthys_stop
- Size 145KB
- Sample260802-mlp64axybt
- SHA256 4e9b26d9763974076946ad4e0d4eff93880fefdacc34b3abb725917fd455af65
- MD5 e4d8bff4fbb1296dd1cae6bfc194a434
- SHA1 0940925ec00f7b45b791d24eb5ba374874afd7d8
- SHA512 a31b229ea15fa8405925b3a97415b448701b86bc0a88ae0be4b8093099c320d8dad8d15c8f260664af2bfbe48b1da9480756330d554b5786508b6ded415497b4
- SSDEEP 3072:LJ0TAz6Mte4A+aaZx8EnCGVuKcnDKW1LN:NrFZaaZmEJuZDKW1LN
- TLSH T120E3E120A1C281F6D497617502AD86779D3E1077072EE6E7D7E636A3AD213F1F23608D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-02_e4d8bff4fbb1296dd1cae6bfc194a434_coinminer_elex_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-02_e4d8bff4fbb1296dd1cae6bfc194a434_coinminer_elex_rhadamanthys_stop.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
snojan
C2
-
http://wecan.hasthe.technology/upload
Targets
-
- Target 2026-08-02_e4d8bff4fbb1296dd1cae6bfc194a434_coinminer_elex_rhadamanthys_stop
- Size 145KB
- SHA256 4e9b26d9763974076946ad4e0d4eff93880fefdacc34b3abb725917fd455af65
- MD5 e4d8bff4fbb1296dd1cae6bfc194a434
- SHA1 0940925ec00f7b45b791d24eb5ba374874afd7d8
- SHA512 a31b229ea15fa8405925b3a97415b448701b86bc0a88ae0be4b8093099c320d8dad8d15c8f260664af2bfbe48b1da9480756330d554b5786508b6ded415497b4
- SSDEEP 3072:LJ0TAz6Mte4A+aaZx8EnCGVuKcnDKW1LN:NrFZaaZmEJuZDKW1LN
- TLSH T120E3E120A1C281F6D497617502AD86779D3E1077072EE6E7D7E636A3AD213F1F23608D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
UPX dump on OEP (original entry point)