General
- Target 2026-08-16_27808b50d35d13387f4e4aa9660a08b3_coinminer_elex_redline-stealer_rhadamanthys_stop
- Size 291KB
- Sample260816-w45tyavvhw
- SHA256 9c7a36e429eb96f089dbc492a2f6c889574c4ae530a0bbed1eb25ef65184ac34
- MD5 27808b50d35d13387f4e4aa9660a08b3
- SHA1 05edb6c22352ad0d9ca9c7234ab80b05d40a2c0a
- SHA512 25f161f8199e72eb766da51d42312903d3f2d18e615f24e926de2b76a2bdb695687e3fe49eaf920b41a13ba9fb7046597b9517d95493d4b613670170ac126847
- SSDEEP 3072:6JWhL0cgHsQB8BPFvdRcF8rFz1wxayNM3coteYnwrZwuhT7kr7+rY9:6ghLWsQmpcF8BzXfwVTTIr7N
- TLSH T169544A1272808071E7560B78045AE7A14A7E7D340BB5D68FF7A83B7A5E702D3A93721F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-16_27808b50d35d13387f4e4aa9660a08b3_coinminer_elex_redline-stealer_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Malware Config
Extracted
Family
-
systex
C2
-
http://xytets.com:2345/t.asp?os=wangba8102
-
http://xytets.com:2345/ll/out.txt
-
http://xytets.com:2345/t.asp?os=home8102
Targets
-
- Target 2026-08-16_27808b50d35d13387f4e4aa9660a08b3_coinminer_elex_redline-stealer_rhadamanthys_stop
- Size 291KB
- SHA256 9c7a36e429eb96f089dbc492a2f6c889574c4ae530a0bbed1eb25ef65184ac34
- MD5 27808b50d35d13387f4e4aa9660a08b3
- SHA1 05edb6c22352ad0d9ca9c7234ab80b05d40a2c0a
- SHA512 25f161f8199e72eb766da51d42312903d3f2d18e615f24e926de2b76a2bdb695687e3fe49eaf920b41a13ba9fb7046597b9517d95493d4b613670170ac126847
- SSDEEP 3072:6JWhL0cgHsQB8BPFvdRcF8rFz1wxayNM3coteYnwrZwuhT7kr7+rY9:6ghLWsQmpcF8BzXfwVTTIr7N
- TLSH T169544A1272808071E7560B78045AE7A14A7E7D340BB5D68FF7A83B7A5E702D3A93721F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE