General
- Target 2026-08-04_4797f39d932873a74d1efc34128d636e_coinminer_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 192KB
- Sample260804-jaaeqayzbz
- SHA256 a8a6f6971f91270bcd1020546d700b5f0002a740465bab53c50263d6e524cc19
- MD5 4797f39d932873a74d1efc34128d636e
- SHA1 85c14629eba52140cf73fc095329b6137acfcf3f
- SHA512 85142f712a766399730abc9eb48665b112ba92c47dbe3843328cf6235e759745a417fb47ffbfa7c67783b130301a3b9c040ef22012399f5516eeb01b99fe030f
- SSDEEP 3072:LJ0TAz6Mte4A+aaZx8EnCGVuWcnDKW1LgppLRHMY0G:NrFZaaZmEJuNDKW1Lgbdl0G
- TLSH T1EA14D12472C2C1B3C49721754169CB76AE7D5072033EE6DBE7E62AB26E213E1E33518D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-04_4797f39d932873a74d1efc34128d636e_coinminer_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-04_4797f39d932873a74d1efc34128d636e_coinminer_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
snojan
C2
-
http://wecan.hasthe.technology/upload
Targets
-
- Target 2026-08-04_4797f39d932873a74d1efc34128d636e_coinminer_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 192KB
- SHA256 a8a6f6971f91270bcd1020546d700b5f0002a740465bab53c50263d6e524cc19
- MD5 4797f39d932873a74d1efc34128d636e
- SHA1 85c14629eba52140cf73fc095329b6137acfcf3f
- SHA512 85142f712a766399730abc9eb48665b112ba92c47dbe3843328cf6235e759745a417fb47ffbfa7c67783b130301a3b9c040ef22012399f5516eeb01b99fe030f
- SSDEEP 3072:LJ0TAz6Mte4A+aaZx8EnCGVuWcnDKW1LgppLRHMY0G:NrFZaaZmEJuNDKW1Lgbdl0G
- TLSH T1EA14D12472C2C1B3C49721754169CB76AE7D5072033EE6DBE7E62AB26E213E1E33518D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
UPX dump on OEP (original entry point)