General
- Target 2026-08-09_0049f1a476db25970aa2fa6f2cdbcc2b_coinminer_elex_rhadamanthys_stop
- Size 144KB
- Sample260809-vv41lsv1at
- SHA256 1efe9909e992cccd12a04cfa9401f9167f46f576215f5505638c8c20494d168b
- MD5 0049f1a476db25970aa2fa6f2cdbcc2b
- SHA1 681c1dd54e07fd64ec97480c18a6c0a6b15c046e
- SHA512 8088343602aef1c4a9cda265162137e4ad1057ce068c93717c76139e3092fe87faa2b4f16824c62c9e527ab346b6c696b8ccc4e8ad73cdcf9125554637d6b3f3
- SSDEEP 1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+8K1xxKY+T6KWl:LJ0TAz6Mte4A+aaZx8EnCGVu8cnDKW1P
- TLSH T117E3E120A2D680F2D493627502AD86779D3E1077072EE6E7D7E576A3AD213F1F23608D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-09_0049f1a476db25970aa2fa6f2cdbcc2b_coinminer_elex_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_0049f1a476db25970aa2fa6f2cdbcc2b_coinminer_elex_rhadamanthys_stop.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
snojan
C2
-
http://wecan.hasthe.technology/upload
Targets
-
- Target 2026-08-09_0049f1a476db25970aa2fa6f2cdbcc2b_coinminer_elex_rhadamanthys_stop
- Size 144KB
- SHA256 1efe9909e992cccd12a04cfa9401f9167f46f576215f5505638c8c20494d168b
- MD5 0049f1a476db25970aa2fa6f2cdbcc2b
- SHA1 681c1dd54e07fd64ec97480c18a6c0a6b15c046e
- SHA512 8088343602aef1c4a9cda265162137e4ad1057ce068c93717c76139e3092fe87faa2b4f16824c62c9e527ab346b6c696b8ccc4e8ad73cdcf9125554637d6b3f3
- SSDEEP 1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+8K1xxKY+T6KWl:LJ0TAz6Mte4A+aaZx8EnCGVu8cnDKW1P
- TLSH T117E3E120A2D680F2D493627502AD86779D3E1077072EE6E7D7E576A3AD213F1F23608D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
UPX dump on OEP (original entry point)