General
- Target 2026-08-09_0076273eed46145b64e98ed931af1a02_coinminer_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 192KB
- Sample260809-sen84sgq8y
- SHA256 b49111454e7b262dca8d9335b46e343420d0eb998fdbf2b239696691bf59f176
- MD5 0076273eed46145b64e98ed931af1a02
- SHA1 8d02525c3cdf8626184aa37c95b1f99f14935409
- SHA512 9111230242b3633019ee90c3396533eb05ba2cbd4c4afeb9b1b184299cb98c458dbeffc6f3221c465d5b2c351b8a7f2492c930d77f30f232f784558c61ca4d9c
- SSDEEP 3072:LJ0TAz6Mte4A+aaZx8EnCGVu0cnDKW1LgppLRHMY0G:NrFZaaZmEJuTDKW1Lgbdl0G
- TLSH T1A614D12472C2C1B3C49721754169CB76AE7D5072033EE6DBE7E62AB26E213E1E33518D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-09_0076273eed46145b64e98ed931af1a02_coinminer_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_0076273eed46145b64e98ed931af1a02_coinminer_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
snojan
C2
-
http://wecan.hasthe.technology/upload
Targets
-
- Target 2026-08-09_0076273eed46145b64e98ed931af1a02_coinminer_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 192KB
- SHA256 b49111454e7b262dca8d9335b46e343420d0eb998fdbf2b239696691bf59f176
- MD5 0076273eed46145b64e98ed931af1a02
- SHA1 8d02525c3cdf8626184aa37c95b1f99f14935409
- SHA512 9111230242b3633019ee90c3396533eb05ba2cbd4c4afeb9b1b184299cb98c458dbeffc6f3221c465d5b2c351b8a7f2492c930d77f30f232f784558c61ca4d9c
- SSDEEP 3072:LJ0TAz6Mte4A+aaZx8EnCGVu0cnDKW1LgppLRHMY0G:NrFZaaZmEJuTDKW1Lgbdl0G
- TLSH T1A614D12472C2C1B3C49721754169CB76AE7D5072033EE6DBE7E62AB26E213E1E33518D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
UPX dump on OEP (original entry point)