General
- Target 2026-08-02_c4eb0d0c45794afe9f454e15f0c28501_coinminer_elex_redline-stealer_rhadamanthys_stop
- Size 291KB
- Sample260802-vewpass1aw
- SHA256 74e2ca530eb2b48d12baf1f2becae365542e85d07293fc0541ad809b344347eb
- MD5 c4eb0d0c45794afe9f454e15f0c28501
- SHA1 2ae39ea8dc153f045f3e35664abc55230e027ff9
- SHA512 c575c81add830d02f463caa45ca4beb75f23bcab23601f596bc55ce6404cf8dd2642a11a82c0e3832e0fd114fbb12b5cb42fca29423dbd2318d50517eb865ab1
- SSDEEP 3072:LJWhL0cgHsQB8BPFvdRcF8rFz1wxayNM3coteYnwrZwuhT7krh+rY9:LghLWsQmpcF8BzXfwVTTIrhN
- TLSH T141544A1272808071E7550B78045AE7A14ABE7D340BB5D68FF7A83B7A5E702D3A93721F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-02_c4eb0d0c45794afe9f454e15f0c28501_coinminer_elex_redline-stealer_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Malware Config
Extracted
Family
-
systex
C2
-
http://xytets.com:2345/t.asp?os=wangba8102
-
http://xytets.com:2345/ll/out.txt
-
http://xytets.com:2345/t.asp?os=home8102
Targets
-
- Target 2026-08-02_c4eb0d0c45794afe9f454e15f0c28501_coinminer_elex_redline-stealer_rhadamanthys_stop
- Size 291KB
- SHA256 74e2ca530eb2b48d12baf1f2becae365542e85d07293fc0541ad809b344347eb
- MD5 c4eb0d0c45794afe9f454e15f0c28501
- SHA1 2ae39ea8dc153f045f3e35664abc55230e027ff9
- SHA512 c575c81add830d02f463caa45ca4beb75f23bcab23601f596bc55ce6404cf8dd2642a11a82c0e3832e0fd114fbb12b5cb42fca29423dbd2318d50517eb865ab1
- SSDEEP 3072:LJWhL0cgHsQB8BPFvdRcF8rFz1wxayNM3coteYnwrZwuhT7krh+rY9:LghLWsQmpcF8BzXfwVTTIrhN
- TLSH T141544A1272808071E7550B78045AE7A14ABE7D340BB5D68FF7A83B7A5E702D3A93721F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE