General
- Target 2026-08-03_5af9000a1d12a3427e2b0224669e80fa_coinminer_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 192KB
- Sample260803-n1gc6sysct
- SHA256 669136bed9d54d2d52e6ec759484023931d0caca5567ef4e2618967077ee1f89
- MD5 5af9000a1d12a3427e2b0224669e80fa
- SHA1 6f1f744e8c4327ff064c04a37cc52f7f279ba708
- SHA512 c2310f57eb04ba72456bb5afa412c61fa154fb6ec31bef0775f419d62bb94ea299101fcb96ec1b849b13ede14283d812231fae269f97f2013a26b6b597d5c011
- SSDEEP 3072:LJ0TAz6Mte4A+aaZx8EnCGVujcnDKW1LgppLRHMY0G:NrFZaaZmEJugDKW1Lgbdl0G
- TLSH T19814D12472C2C1B3C49721754169CB76AE7D5072033EE6DBE7E62AB26E213E1E33518D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-03_5af9000a1d12a3427e2b0224669e80fa_coinminer_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_5af9000a1d12a3427e2b0224669e80fa_coinminer_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
snojan
C2
-
http://wecan.hasthe.technology/upload
Targets
-
- Target 2026-08-03_5af9000a1d12a3427e2b0224669e80fa_coinminer_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 192KB
- SHA256 669136bed9d54d2d52e6ec759484023931d0caca5567ef4e2618967077ee1f89
- MD5 5af9000a1d12a3427e2b0224669e80fa
- SHA1 6f1f744e8c4327ff064c04a37cc52f7f279ba708
- SHA512 c2310f57eb04ba72456bb5afa412c61fa154fb6ec31bef0775f419d62bb94ea299101fcb96ec1b849b13ede14283d812231fae269f97f2013a26b6b597d5c011
- SSDEEP 3072:LJ0TAz6Mte4A+aaZx8EnCGVujcnDKW1LgppLRHMY0G:NrFZaaZmEJugDKW1Lgbdl0G
- TLSH T19814D12472C2C1B3C49721754169CB76AE7D5072033EE6DBE7E62AB26E213E1E33518D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
UPX dump on OEP (original entry point)