General
- Target 2026-08-07_443eed3ba21dd28a40be1ca26ad07ff3_coinminer_elex_rhadamanthys_stop
- Size 144KB
- Sample260807-rj3rmazvds
- SHA256 6975bc83270116477b0feefd6fc59c6ff7b512bc8080a230630d01e55e5d28c8
- MD5 443eed3ba21dd28a40be1ca26ad07ff3
- SHA1 aa31cd2d745b38ebd9100c7e2287af4e4f82c89e
- SHA512 2dba4acbcafe59d986db46974c2f99b8b5a8e2d993a01cded334c88bbcbba00325d3392e9c817032e78787a48799dcb949e6fd69ce1e7b736ffd002a0b42efb1
- SSDEEP 1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+FK1xxKY+T6KWl:LJ0TAz6Mte4A+aaZx8EnCGVuFcnDKW1P
- TLSH T1B0E3E120A2D680F2D493627502AD82779D3E1077072EE6E7D7E576A3AD213F1F23608D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-07_443eed3ba21dd28a40be1ca26ad07ff3_coinminer_elex_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-07_443eed3ba21dd28a40be1ca26ad07ff3_coinminer_elex_rhadamanthys_stop.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
snojan
C2
-
http://wecan.hasthe.technology/upload
Targets
-
- Target 2026-08-07_443eed3ba21dd28a40be1ca26ad07ff3_coinminer_elex_rhadamanthys_stop
- Size 144KB
- SHA256 6975bc83270116477b0feefd6fc59c6ff7b512bc8080a230630d01e55e5d28c8
- MD5 443eed3ba21dd28a40be1ca26ad07ff3
- SHA1 aa31cd2d745b38ebd9100c7e2287af4e4f82c89e
- SHA512 2dba4acbcafe59d986db46974c2f99b8b5a8e2d993a01cded334c88bbcbba00325d3392e9c817032e78787a48799dcb949e6fd69ce1e7b736ffd002a0b42efb1
- SSDEEP 1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+FK1xxKY+T6KWl:LJ0TAz6Mte4A+aaZx8EnCGVuFcnDKW1P
- TLSH T1B0E3E120A2D680F2D493627502AD82779D3E1077072EE6E7D7E576A3AD213F1F23608D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
UPX dump on OEP (original entry point)