General
- Target 2026-08-19_1bcb6c50636c3323ee4e0626edfa6b24_coinminer_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 176KB
- Sample260819-zlbpxstaph
- SHA256 883a5a2ed333034be66d9e3011621696c68ef016a744a35d0eedd7c9274e0784
- MD5 1bcb6c50636c3323ee4e0626edfa6b24
- SHA1 1ed8fe3621b0058c9334d66cc827e25989c0c975
- SHA512 df55c2484138c298ce9d0cc60756d251b55e22af66ff6635961ae27ec37efc552e1bd70bdd09c81988b6bf4d43a031414a834b166e0a96687b852b2de5926887
- SSDEEP 3072:LJ0TAz6Mte4A+aaZx8EnCGVurcnDKW1LgppLRHMl:NrFZaaZmEJuYDKW1LgbdI
- TLSH T16004D12071C2C0B7D4972175426A87739E7D1076073EE6E7EBE62AB29E213E1E33614D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-19_1bcb6c50636c3323ee4e0626edfa6b24_coinminer_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-19_1bcb6c50636c3323ee4e0626edfa6b24_coinminer_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260710-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
snojan
C2
-
http://wecan.hasthe.technology/upload
Targets
-
- Target 2026-08-19_1bcb6c50636c3323ee4e0626edfa6b24_coinminer_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 176KB
- SHA256 883a5a2ed333034be66d9e3011621696c68ef016a744a35d0eedd7c9274e0784
- MD5 1bcb6c50636c3323ee4e0626edfa6b24
- SHA1 1ed8fe3621b0058c9334d66cc827e25989c0c975
- SHA512 df55c2484138c298ce9d0cc60756d251b55e22af66ff6635961ae27ec37efc552e1bd70bdd09c81988b6bf4d43a031414a834b166e0a96687b852b2de5926887
- SSDEEP 3072:LJ0TAz6Mte4A+aaZx8EnCGVurcnDKW1LgppLRHMl:NrFZaaZmEJuYDKW1LgbdI
- TLSH T16004D12071C2C0B7D4972175426A87739E7D1076073EE6E7EBE62AB29E213E1E33614D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
UPX dump on OEP (original entry point)