General
- Target 2026-08-08_fd79936605a363f55674e308b2088515_coinminer_elex_rhadamanthys_stop
- Size 144KB
- Sample260808-lnchcaxyhv
- SHA256 a5c21e89bebc00f1fabeab02534a45467b32e029a7ecab3811dd035eab58cd9c
- MD5 fd79936605a363f55674e308b2088515
- SHA1 0b1bf64ac66c8864565fb95966583b041a9290c1
- SHA512 e65a8d12f5cb71a08dc6d19bf523ecc72f840f0d7cfa8004aac4d310cc6bda63909cc150ba18ccda1c6e956676c0962de5f2b5fab4e51e2225587fae57506f00
- SSDEEP 1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+eK1xxKY+T6KWl:LJ0TAz6Mte4A+aaZx8EnCGVuecnDKW1P
- TLSH T158E3E120A2D680F2D493627502AD86779D3E1077072EE6E7D7E576A3AD213F1F23608D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-08_fd79936605a363f55674e308b2088515_coinminer_elex_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-08_fd79936605a363f55674e308b2088515_coinminer_elex_rhadamanthys_stop.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
snojan
C2
-
http://wecan.hasthe.technology/upload
Targets
-
- Target 2026-08-08_fd79936605a363f55674e308b2088515_coinminer_elex_rhadamanthys_stop
- Size 144KB
- SHA256 a5c21e89bebc00f1fabeab02534a45467b32e029a7ecab3811dd035eab58cd9c
- MD5 fd79936605a363f55674e308b2088515
- SHA1 0b1bf64ac66c8864565fb95966583b041a9290c1
- SHA512 e65a8d12f5cb71a08dc6d19bf523ecc72f840f0d7cfa8004aac4d310cc6bda63909cc150ba18ccda1c6e956676c0962de5f2b5fab4e51e2225587fae57506f00
- SSDEEP 1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+eK1xxKY+T6KWl:LJ0TAz6Mte4A+aaZx8EnCGVuecnDKW1P
- TLSH T158E3E120A2D680F2D493627502AD86779D3E1077072EE6E7D7E576A3AD213F1F23608D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
UPX dump on OEP (original entry point)