General
- Target 2026-08-09_001d13db60071081be2dad3c1e8c5349_coinminer_elex_rhadamanthys_stop
- Size 144KB
- Sample260809-xkmdxstfre
- SHA256 2199725cb1308574607659cc60fb45d907c4ca2f0a7fb80f308fff46a2974fb1
- MD5 001d13db60071081be2dad3c1e8c5349
- SHA1 049656a11420d5b54acdf6079a678a40ed4f3139
- SHA512 d7be266fa0f64ef05b0d6761447cd6391a3c75c4c777d2e3134dccffc186a8e2227cfc42f1b1df26e761a76a7c64a70ab15a6d80a78817f947a438abafbbb0fa
- SSDEEP 1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+ZK1xxKY+T6KWl:LJ0TAz6Mte4A+aaZx8EnCGVuZcnDKW1P
- TLSH T188E3E120A2D680F2D493627502AD86779D3E1077072EE6E7D7E576A3AD213F1F23608D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-09_001d13db60071081be2dad3c1e8c5349_coinminer_elex_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_001d13db60071081be2dad3c1e8c5349_coinminer_elex_rhadamanthys_stop.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
snojan
C2
-
http://wecan.hasthe.technology/upload
Targets
-
- Target 2026-08-09_001d13db60071081be2dad3c1e8c5349_coinminer_elex_rhadamanthys_stop
- Size 144KB
- SHA256 2199725cb1308574607659cc60fb45d907c4ca2f0a7fb80f308fff46a2974fb1
- MD5 001d13db60071081be2dad3c1e8c5349
- SHA1 049656a11420d5b54acdf6079a678a40ed4f3139
- SHA512 d7be266fa0f64ef05b0d6761447cd6391a3c75c4c777d2e3134dccffc186a8e2227cfc42f1b1df26e761a76a7c64a70ab15a6d80a78817f947a438abafbbb0fa
- SSDEEP 1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+ZK1xxKY+T6KWl:LJ0TAz6Mte4A+aaZx8EnCGVuZcnDKW1P
- TLSH T188E3E120A2D680F2D493627502AD86779D3E1077072EE6E7D7E576A3AD213F1F23608D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
UPX dump on OEP (original entry point)