General
- Target 2026-08-14_0096478f40ea7701a9257d93ca3c9e8b_coinminer_elex_rhadamanthys_stop
- Size 128KB
- Sample260814-2cca7sshlb
- SHA256 bfb0d7a190032f9d62ad7d2703cf207d1fedf2aa6125d08b86e554753e82f022
- MD5 0096478f40ea7701a9257d93ca3c9e8b
- SHA1 aa35100d1e318efc62c4eb023f2c384e51d9b37b
- SHA512 670bbc14b655c559d58122c706abbf6b598588b85894164089a4cdf10cc581e95eca7d57209b3c6572dfbb9926e2dc65a7236435bdc4a9e4a7f9d737a837442f
- SSDEEP 1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+jK1xxKY+T6KWs:LJ0TAz6Mte4A+aaZx8EnCGVujcnDKWs
- TLSH T1BFD3E120B2CB81F2E097527502DE9277AC3E10A6471EE6F7D6E476E3AD113F1B235088
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-14_0096478f40ea7701a9257d93ca3c9e8b_coinminer_elex_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-14_0096478f40ea7701a9257d93ca3c9e8b_coinminer_elex_rhadamanthys_stop.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
snojan
C2
-
http://wecan.hasthe.technology/upload
Targets
-
- Target 2026-08-14_0096478f40ea7701a9257d93ca3c9e8b_coinminer_elex_rhadamanthys_stop
- Size 128KB
- SHA256 bfb0d7a190032f9d62ad7d2703cf207d1fedf2aa6125d08b86e554753e82f022
- MD5 0096478f40ea7701a9257d93ca3c9e8b
- SHA1 aa35100d1e318efc62c4eb023f2c384e51d9b37b
- SHA512 670bbc14b655c559d58122c706abbf6b598588b85894164089a4cdf10cc581e95eca7d57209b3c6572dfbb9926e2dc65a7236435bdc4a9e4a7f9d737a837442f
- SSDEEP 1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+jK1xxKY+T6KWs:LJ0TAz6Mte4A+aaZx8EnCGVujcnDKWs
- TLSH T1BFD3E120B2CB81F2E097527502DE9277AC3E10A6471EE6F7D6E476E3AD113F1B235088
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
UPX dump on OEP (original entry point)