General
- Target 2026-08-19_f5eb5c20af809a49e5e7fa1a202a9536_coinminer_elex_redline-stealer_rhadamanthys_stop
- Size 291KB
- Sample260819-rqq2eawdlf
- SHA256 d4679270b50a77278945ce5333d114f1a9c36d26efca1c8c53210e8f280cfbef
- MD5 f5eb5c20af809a49e5e7fa1a202a9536
- SHA1 d4bbbc5bd1d8205c38c0197180cd326b148ab966
- SHA512 d0ac2bce5688daaeec7ed8968962298238604349d5e9910d05f3515a6cc9c61c6a114fd655377c2705c02fa20f794d5cd01f5357592835f0611eaaddc9d91328
- SSDEEP 3072:XJWhL0cgHsQB8BPFvdRcF8rFz1wxayNM3coteYnwrZwuhT7kr++rY9:XghLWsQmpcF8BzXfwVTTIr+N
- TLSH T16C544A0272808071E7560B78045AE7A14ABE7D340BB5D68FF7A43B7A5E702D3A93721F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-19_f5eb5c20af809a49e5e7fa1a202a9536_coinminer_elex_redline-stealer_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Malware Config
Extracted
Family
-
systex
C2
-
http://xytets.com:2345/t.asp?os=wangba8102
-
http://xytets.com:2345/ll/out.txt
-
http://xytets.com:2345/t.asp?os=home8102
Targets
-
- Target 2026-08-19_f5eb5c20af809a49e5e7fa1a202a9536_coinminer_elex_redline-stealer_rhadamanthys_stop
- Size 291KB
- SHA256 d4679270b50a77278945ce5333d114f1a9c36d26efca1c8c53210e8f280cfbef
- MD5 f5eb5c20af809a49e5e7fa1a202a9536
- SHA1 d4bbbc5bd1d8205c38c0197180cd326b148ab966
- SHA512 d0ac2bce5688daaeec7ed8968962298238604349d5e9910d05f3515a6cc9c61c6a114fd655377c2705c02fa20f794d5cd01f5357592835f0611eaaddc9d91328
- SSDEEP 3072:XJWhL0cgHsQB8BPFvdRcF8rFz1wxayNM3coteYnwrZwuhT7kr++rY9:XghLWsQmpcF8BzXfwVTTIr+N
- TLSH T16C544A0272808071E7560B78045AE7A14ABE7D340BB5D68FF7A43B7A5E702D3A93721F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE