General
- Target 2026-08-07_f8e9df26c897136ee6798c425e3a3933_coinminer_elex_rhadamanthys_stop
- Size 144KB
- Sample260807-kyk2sseh65
- SHA256 9631aa299473584e245eabaa68040616758dbcaf467ce66ea96e2c498e791987
- MD5 f8e9df26c897136ee6798c425e3a3933
- SHA1 f6b6a83784a1757c100c42834686d767e540ea96
- SHA512 aaf8fa0242c3638228283f445c5d06b55c85ecfac45ae1ce46c49a0ebf07db2c5d9e19b00dd1d2004e87ecf5fba5ddbaa1337e252ced1210675b47593119ef73
- SSDEEP 1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+EK1xxKY+T6KWl:LJ0TAz6Mte4A+aaZx8EnCGVuEcnDKW1P
- TLSH T1D4E3E120A2D680F2D493627502AD86779D3E1077072EE6E7D7E576A3AD213F1F23608D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-07_f8e9df26c897136ee6798c425e3a3933_coinminer_elex_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-07_f8e9df26c897136ee6798c425e3a3933_coinminer_elex_rhadamanthys_stop.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
snojan
C2
-
http://wecan.hasthe.technology/upload
Targets
-
- Target 2026-08-07_f8e9df26c897136ee6798c425e3a3933_coinminer_elex_rhadamanthys_stop
- Size 144KB
- SHA256 9631aa299473584e245eabaa68040616758dbcaf467ce66ea96e2c498e791987
- MD5 f8e9df26c897136ee6798c425e3a3933
- SHA1 f6b6a83784a1757c100c42834686d767e540ea96
- SHA512 aaf8fa0242c3638228283f445c5d06b55c85ecfac45ae1ce46c49a0ebf07db2c5d9e19b00dd1d2004e87ecf5fba5ddbaa1337e252ced1210675b47593119ef73
- SSDEEP 1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+EK1xxKY+T6KWl:LJ0TAz6Mte4A+aaZx8EnCGVuEcnDKW1P
- TLSH T1D4E3E120A2D680F2D493627502AD86779D3E1077072EE6E7D7E576A3AD213F1F23608D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
UPX dump on OEP (original entry point)