General
- Target 2026-08-04_103fc10792600bcc473cb2392a391f84_coinminer_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 192KB
- Sample260804-t7hsgavfke
- SHA256 2ed15e7040217ed91a43b5cea74ffc01824f3407d951fb988deb5b191b5ccc44
- MD5 103fc10792600bcc473cb2392a391f84
- SHA1 5ec9b8cecb3dcce2a583f61275da31aad6ecc7a4
- SHA512 8e2f920a31af4a9e0c469c61e6351903531744ac9b116bfa2f895127158f6b125695146af3c89422edcb0ee9a6385b30a34e142c0b8845de2f29b732d8102e33
- SSDEEP 3072:LJ0TAz6Mte4A+aaZx8EnCGVufcnDKW1LgppLRHMY0G:NrFZaaZmEJuUDKW1Lgbdl0G
- TLSH T11014D12472C2C1B3C49721754169CB76AE7D5072033EE6DBE7E62AB26E213E1E33518D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-04_103fc10792600bcc473cb2392a391f84_coinminer_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-04_103fc10792600bcc473cb2392a391f84_coinminer_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
snojan
C2
-
http://wecan.hasthe.technology/upload
Targets
-
- Target 2026-08-04_103fc10792600bcc473cb2392a391f84_coinminer_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 192KB
- SHA256 2ed15e7040217ed91a43b5cea74ffc01824f3407d951fb988deb5b191b5ccc44
- MD5 103fc10792600bcc473cb2392a391f84
- SHA1 5ec9b8cecb3dcce2a583f61275da31aad6ecc7a4
- SHA512 8e2f920a31af4a9e0c469c61e6351903531744ac9b116bfa2f895127158f6b125695146af3c89422edcb0ee9a6385b30a34e142c0b8845de2f29b732d8102e33
- SSDEEP 3072:LJ0TAz6Mte4A+aaZx8EnCGVufcnDKW1LgppLRHMY0G:NrFZaaZmEJuUDKW1Lgbdl0G
- TLSH T11014D12472C2C1B3C49721754169CB76AE7D5072033EE6DBE7E62AB26E213E1E33518D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
UPX dump on OEP (original entry point)