General
- Target 2026-08-10_0027a094795330594970e3fd7e38aca1_coinminer_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 192KB
- Sample260810-m265jsssft
- SHA256 e90c5f565b34a5492e4401292fa6aeb12f05d010adb24dbafd350c2ba1af875c
- MD5 0027a094795330594970e3fd7e38aca1
- SHA1 8136bf06a655113724b6c83dbc361e65426fd744
- SHA512 f30cabb4220484722aa740a9c31a1dfe5a6964517f7e80873d6aa38589298f5186a98258010cd1d473b5ee324732e5fd0f54d232d3e3301fb09990049a17f152
- SSDEEP 3072:LJ0TAz6Mte4A+aaZx8EnCGVuDcnDKW1LgppLRHMY0G:NrFZaaZmEJuADKW1Lgbdl0G
- TLSH T15B14D12472C2C1B3C49721754169CB76AE7D5072033EE6DBE7E62AB26E213E1E33518D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-10_0027a094795330594970e3fd7e38aca1_coinminer_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-10_0027a094795330594970e3fd7e38aca1_coinminer_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
snojan
C2
-
http://wecan.hasthe.technology/upload
Targets
-
- Target 2026-08-10_0027a094795330594970e3fd7e38aca1_coinminer_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 192KB
- SHA256 e90c5f565b34a5492e4401292fa6aeb12f05d010adb24dbafd350c2ba1af875c
- MD5 0027a094795330594970e3fd7e38aca1
- SHA1 8136bf06a655113724b6c83dbc361e65426fd744
- SHA512 f30cabb4220484722aa740a9c31a1dfe5a6964517f7e80873d6aa38589298f5186a98258010cd1d473b5ee324732e5fd0f54d232d3e3301fb09990049a17f152
- SSDEEP 3072:LJ0TAz6Mte4A+aaZx8EnCGVuDcnDKW1LgppLRHMY0G:NrFZaaZmEJuADKW1Lgbdl0G
- TLSH T15B14D12472C2C1B3C49721754169CB76AE7D5072033EE6DBE7E62AB26E213E1E33518D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
UPX dump on OEP (original entry point)