General
- Target 2026-08-04_44ef4a566c99700dedac546447466745_coinminer_elex_rhadamanthys_stop
- Size 144KB
- Sample260804-jbhsgstgmf
- SHA256 ff2e4068f619884d3967c8c7065c6619d60fb7d3b7192c4e72efcdda1ee1fc9a
- MD5 44ef4a566c99700dedac546447466745
- SHA1 b43c0d02e241e633a69fb46dccca2c0cbe8eb27c
- SHA512 26bc5157dcd594aa598e7c94a0e16f4ef84ab503f7a45bef1600eb8d00158576945e2eb480aaf9e1ab1212a56cf2593ac63caa9c6bba71ae3124e8dfc7f37777
- SSDEEP 1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+DK1xxKY+T6KWl:LJ0TAz6Mte4A+aaZx8EnCGVuDcnDKW1P
- TLSH T163E3E120A2D680F2D493627502AD86779D3E1077072EE6E7D7E576A3AD213F1F23608D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-04_44ef4a566c99700dedac546447466745_coinminer_elex_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-04_44ef4a566c99700dedac546447466745_coinminer_elex_rhadamanthys_stop.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
snojan
C2
-
http://wecan.hasthe.technology/upload
Targets
-
- Target 2026-08-04_44ef4a566c99700dedac546447466745_coinminer_elex_rhadamanthys_stop
- Size 144KB
- SHA256 ff2e4068f619884d3967c8c7065c6619d60fb7d3b7192c4e72efcdda1ee1fc9a
- MD5 44ef4a566c99700dedac546447466745
- SHA1 b43c0d02e241e633a69fb46dccca2c0cbe8eb27c
- SHA512 26bc5157dcd594aa598e7c94a0e16f4ef84ab503f7a45bef1600eb8d00158576945e2eb480aaf9e1ab1212a56cf2593ac63caa9c6bba71ae3124e8dfc7f37777
- SSDEEP 1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+DK1xxKY+T6KWl:LJ0TAz6Mte4A+aaZx8EnCGVuDcnDKW1P
- TLSH T163E3E120A2D680F2D493627502AD86779D3E1077072EE6E7D7E576A3AD213F1F23608D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
UPX dump on OEP (original entry point)