General
- Target 2026-08-07_e4ac495b57ac4925d8347ee6f0204911_coinminer_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 176KB
- Sample260807-3pr3vsdq2t
- SHA256 2423a2a5d7663193487c27f1ed55d8c4f961285253bf029460c404dcd8505da1
- MD5 e4ac495b57ac4925d8347ee6f0204911
- SHA1 50e3eb4851af56e9538e786bb6c021084d5700e0
- SHA512 f069efdc13bbc4925ab8b378f0363c8ec7d08746e0b3b92a20a5407188441a96c6921c16efdd860f4144ce65abfc8ee72216bd84e040c1e8c5af24ff12d00e51
- SSDEEP 3072:LJ0TAz6Mte4A+aaZx8EnCGVuccnDKW1LgppLRHMl:NrFZaaZmEJuLDKW1LgbdI
- TLSH T11F04D12071C2C0B7D4972175426A87739E7D1076073EE6E7EBE62AB29E213E1E33614D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-07_e4ac495b57ac4925d8347ee6f0204911_coinminer_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-07_e4ac495b57ac4925d8347ee6f0204911_coinminer_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
snojan
C2
-
http://wecan.hasthe.technology/upload
Targets
-
- Target 2026-08-07_e4ac495b57ac4925d8347ee6f0204911_coinminer_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 176KB
- SHA256 2423a2a5d7663193487c27f1ed55d8c4f961285253bf029460c404dcd8505da1
- MD5 e4ac495b57ac4925d8347ee6f0204911
- SHA1 50e3eb4851af56e9538e786bb6c021084d5700e0
- SHA512 f069efdc13bbc4925ab8b378f0363c8ec7d08746e0b3b92a20a5407188441a96c6921c16efdd860f4144ce65abfc8ee72216bd84e040c1e8c5af24ff12d00e51
- SSDEEP 3072:LJ0TAz6Mte4A+aaZx8EnCGVuccnDKW1LgppLRHMl:NrFZaaZmEJuLDKW1LgbdI
- TLSH T11F04D12071C2C0B7D4972175426A87739E7D1076073EE6E7EBE62AB29E213E1E33614D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
UPX dump on OEP (original entry point)