General
- Target 2026-08-02_8f5b74a1902afe823f160028eae38c83_coinminer_elex_redline-stealer_rhadamanthys_stop
- Size 291KB
- Sample260802-v9qrjayakh
- SHA256 c9d08ef5063bf75d196f3227c351d9c752ce68e72d3091fab44d49d70e17b2f4
- MD5 8f5b74a1902afe823f160028eae38c83
- SHA1 8cdcb5830b30ca87825195768fd4e3ad0e01293e
- SHA512 f54ecbb4d66225930f5c1b4e3d31a4baae350b74f9bb7aafd44c58090b3e46a55da91328883a2f3faade5e9e2e2c9baaa31f9db74a35715c37747d68980e0204
- SSDEEP 3072:C6JWhL0cgHsQB8BPFvdRcF8rFz1wxayNM3coteYnwrZwuhT7krh+rY9L:C6ghLWsQmpcF8BzXfwVTTIrhN5
- TLSH T1F8544A0272808071E7560B78045AE7A14A7E7D344BB5D68FF7A83B7A5E702D3A93721F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-02_8f5b74a1902afe823f160028eae38c83_coinminer_elex_redline-stealer_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Malware Config
Extracted
Family
-
systex
C2
-
http://xytets.com:2345/t.asp?os=wangba8102
-
http://xytets.com:2345/ll/out.txt
-
http://xytets.com:2345/t.asp?os=home8102
Targets
-
- Target 2026-08-02_8f5b74a1902afe823f160028eae38c83_coinminer_elex_redline-stealer_rhadamanthys_stop
- Size 291KB
- SHA256 c9d08ef5063bf75d196f3227c351d9c752ce68e72d3091fab44d49d70e17b2f4
- MD5 8f5b74a1902afe823f160028eae38c83
- SHA1 8cdcb5830b30ca87825195768fd4e3ad0e01293e
- SHA512 f54ecbb4d66225930f5c1b4e3d31a4baae350b74f9bb7aafd44c58090b3e46a55da91328883a2f3faade5e9e2e2c9baaa31f9db74a35715c37747d68980e0204
- SSDEEP 3072:C6JWhL0cgHsQB8BPFvdRcF8rFz1wxayNM3coteYnwrZwuhT7krh+rY9L:C6ghLWsQmpcF8BzXfwVTTIrhN5
- TLSH T1F8544A0272808071E7560B78045AE7A14A7E7D344BB5D68FF7A83B7A5E702D3A93721F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE