General
- Target 2026-08-09_00111e39c63d3222fb78fd73b70c277a_coinminer_elex_rhadamanthys_stop
- Size 144KB
- Sample260809-vwjq3asere
- SHA256 eee369971df0d60330fa534e818578179682765cdfe82afd455b4fd25ef6f0c2
- MD5 00111e39c63d3222fb78fd73b70c277a
- SHA1 5078a9e1f268b9129aeac97ed0938c9fc723b690
- SHA512 a5969ac4ab43aa7fc42fd26290bf418dcb99170f228bd6a55ff2c6cecaaf9dd9845b1dd3b90ad0ce6fe0cc53d774777733b3241e8d1f06167d8dfcb0c1b71490
- SSDEEP 1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+lUK1xxKY+T6Kk:LJ0TAz6Mte4A+aaZx8EnCGVuqcnDKW1P
- TLSH T1D9E3E120A2D680F2D493627502AD86779D3E1077072EE6E7D7E576A3AD213F1F23608D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-09_00111e39c63d3222fb78fd73b70c277a_coinminer_elex_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_00111e39c63d3222fb78fd73b70c277a_coinminer_elex_rhadamanthys_stop.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
snojan
C2
-
http://wecan.hasthe.technology/upload
Targets
-
- Target 2026-08-09_00111e39c63d3222fb78fd73b70c277a_coinminer_elex_rhadamanthys_stop
- Size 144KB
- SHA256 eee369971df0d60330fa534e818578179682765cdfe82afd455b4fd25ef6f0c2
- MD5 00111e39c63d3222fb78fd73b70c277a
- SHA1 5078a9e1f268b9129aeac97ed0938c9fc723b690
- SHA512 a5969ac4ab43aa7fc42fd26290bf418dcb99170f228bd6a55ff2c6cecaaf9dd9845b1dd3b90ad0ce6fe0cc53d774777733b3241e8d1f06167d8dfcb0c1b71490
- SSDEEP 1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+lUK1xxKY+T6Kk:LJ0TAz6Mte4A+aaZx8EnCGVuqcnDKW1P
- TLSH T1D9E3E120A2D680F2D493627502AD86779D3E1077072EE6E7D7E576A3AD213F1F23608D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
UPX dump on OEP (original entry point)