General
- Target 2026-08-04_17262100938df651b4533f4452136844_coinminer_elex_rhadamanthys_stop
- Size 128KB
- Sample260804-j4855svcrb
- SHA256 8dec39348c77f05bf6c6b0b025b93712a58e00620480740cde3c7074ea43f64b
- MD5 17262100938df651b4533f4452136844
- SHA1 a8fb2ff51f0d3939b96f6c052651a8930ce8519c
- SHA512 701225f1e978e5b01eeb84eeb467d1ecb9d3b59298fdffcf43b4bf20bb8daa680ac143b64c1f6aa1f8cfddc318d29e5d8d2573ddbf8b7e86b711d3c291cdca7f
- SSDEEP 1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+wK1xxKY+T6KWs:LJ0TAz6Mte4A+aaZx8EnCGVuwcnDKWs
- TLSH T17AD3E120B2CB81F2E097527502DE9277AC3E10A6471EE6F7D6E476E3AD113F1B235089
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-04_17262100938df651b4533f4452136844_coinminer_elex_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-04_17262100938df651b4533f4452136844_coinminer_elex_rhadamanthys_stop.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
snojan
C2
-
http://wecan.hasthe.technology/upload
Targets
-
- Target 2026-08-04_17262100938df651b4533f4452136844_coinminer_elex_rhadamanthys_stop
- Size 128KB
- SHA256 8dec39348c77f05bf6c6b0b025b93712a58e00620480740cde3c7074ea43f64b
- MD5 17262100938df651b4533f4452136844
- SHA1 a8fb2ff51f0d3939b96f6c052651a8930ce8519c
- SHA512 701225f1e978e5b01eeb84eeb467d1ecb9d3b59298fdffcf43b4bf20bb8daa680ac143b64c1f6aa1f8cfddc318d29e5d8d2573ddbf8b7e86b711d3c291cdca7f
- SSDEEP 1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+wK1xxKY+T6KWs:LJ0TAz6Mte4A+aaZx8EnCGVuwcnDKWs
- TLSH T17AD3E120B2CB81F2E097527502DE9277AC3E10A6471EE6F7D6E476E3AD113F1B235089
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
UPX dump on OEP (original entry point)