General
- Target 2026-08-09_5fcce973be369f4a6920c3b0104e5422_coinminer_elex_rhadamanthys_stop
- Size 128KB
- Sample260809-l7asvsvhpb
- SHA256 dcb3922ce6e70409934b807020e8e194ad3eb1dfa1163f8c99293f7de1e76cc3
- MD5 5fcce973be369f4a6920c3b0104e5422
- SHA1 6cd69145c5271a34f01aad06ae667dcf996fa1df
- SHA512 fd65654df25bda5b26325cb4c15a1b6c1e875c417d20316c4959bb1d22da0cd058bf57b3ebde502f48dd73af8cad7d9c8d83704539d42dc05f7a4c569de4d7d5
- SSDEEP 1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+PK1xxKY+T6KWs:LJ0TAz6Mte4A+aaZx8EnCGVuPcnDKWs
- TLSH T195D3E120B2CB81F6E097527502DE9277AC3E10A6471EE6F7D6E476E3AD113F1B235089
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-09_5fcce973be369f4a6920c3b0104e5422_coinminer_elex_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_5fcce973be369f4a6920c3b0104e5422_coinminer_elex_rhadamanthys_stop.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
snojan
C2
-
http://wecan.hasthe.technology/upload
Targets
-
- Target 2026-08-09_5fcce973be369f4a6920c3b0104e5422_coinminer_elex_rhadamanthys_stop
- Size 128KB
- SHA256 dcb3922ce6e70409934b807020e8e194ad3eb1dfa1163f8c99293f7de1e76cc3
- MD5 5fcce973be369f4a6920c3b0104e5422
- SHA1 6cd69145c5271a34f01aad06ae667dcf996fa1df
- SHA512 fd65654df25bda5b26325cb4c15a1b6c1e875c417d20316c4959bb1d22da0cd058bf57b3ebde502f48dd73af8cad7d9c8d83704539d42dc05f7a4c569de4d7d5
- SSDEEP 1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+PK1xxKY+T6KWs:LJ0TAz6Mte4A+aaZx8EnCGVuPcnDKWs
- TLSH T195D3E120B2CB81F6E097527502DE9277AC3E10A6471EE6F7D6E476E3AD113F1B235089
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
UPX dump on OEP (original entry point)