General
- Target 2026-08-17_6b5880e32d9dfd29b2c4d21e20d9938d_amadey_coinminer_elex_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 308KB
- Sample260817-qectza1cqb
- SHA256 fa4162924bd7fc74f88efec4da3d536aca30ae27d98e52feed4e6a6c98127b28
- MD5 6b5880e32d9dfd29b2c4d21e20d9938d
- SHA1 419fd923fefc0409c5be18aac9b944f711f8d828
- SHA512 4dca2ef63d55323c814020a94cd9249e97081a31d5cad4cca33b8be73c41f40648ca97333e2ce9a1b638a64f7f6c8e4d9f0ed07aac0d641b8bd98eb4177551cf
- SSDEEP 3072:3J0Bs3o8A4M3riN6MhGkgS3PL6pb9t16n5OkhBOPC/6/FnncroP9Y00URSfsGyRH:ZwDeM7iNEkgiOb31k1EC8J/FtQfPjI
- TLSH T14B647C21B994D0F3E85300B105049772AE72ED35175ACA87E3D5AF79ADB0341DBA83BE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-17_6b5880e32d9dfd29b2c4d21e20d9938d_amadey_coinminer_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-17_6b5880e32d9dfd29b2c4d21e20d9938d_amadey_coinminer_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
snojan
C2
-
http://wecan.hasthe.technology/upload
Targets
-
- Target 2026-08-17_6b5880e32d9dfd29b2c4d21e20d9938d_amadey_coinminer_elex_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 308KB
- SHA256 fa4162924bd7fc74f88efec4da3d536aca30ae27d98e52feed4e6a6c98127b28
- MD5 6b5880e32d9dfd29b2c4d21e20d9938d
- SHA1 419fd923fefc0409c5be18aac9b944f711f8d828
- SHA512 4dca2ef63d55323c814020a94cd9249e97081a31d5cad4cca33b8be73c41f40648ca97333e2ce9a1b638a64f7f6c8e4d9f0ed07aac0d641b8bd98eb4177551cf
- SSDEEP 3072:3J0Bs3o8A4M3riN6MhGkgS3PL6pb9t16n5OkhBOPC/6/FnncroP9Y00URSfsGyRH:ZwDeM7iNEkgiOb31k1EC8J/FtQfPjI
- TLSH T14B647C21B994D0F3E85300B105049772AE72ED35175ACA87E3D5AF79ADB0341DBA83BE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
UPX dump on OEP (original entry point)