General
- Target 2026-08-19_0885333e212ce3eee43a394649c6784a_coinminer_elex_rhadamanthys_stop
- Size 128KB
- Sample260819-zyandshf63
- SHA256 35a77b68e72c28ef7ffe61e763ca038c870df77685ac43e3f95825a021751fec
- MD5 0885333e212ce3eee43a394649c6784a
- SHA1 74b9fee491fdfe14486447c62e8778a99e6fd1a3
- SHA512 8975fc318047ede1083d5ef53a6059c1bcd0d394771b82121be3be37040f7ad867cada5baaaa64422aeef88b31baa3b6b4076a7013f0cf5cd23d3760412b1d72
- SSDEEP 1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+CK1xxKY+T6KWs:LJ0TAz6Mte4A+aaZx8EnCGVuCcnDKWs
- TLSH T120D3E120B2CB81F2E097527502DE9277AC3E10A6471EE6F7D6E476E3AD113F1B235088
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-19_0885333e212ce3eee43a394649c6784a_coinminer_elex_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-19_0885333e212ce3eee43a394649c6784a_coinminer_elex_rhadamanthys_stop.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
snojan
C2
-
http://wecan.hasthe.technology/upload
Targets
-
- Target 2026-08-19_0885333e212ce3eee43a394649c6784a_coinminer_elex_rhadamanthys_stop
- Size 128KB
- SHA256 35a77b68e72c28ef7ffe61e763ca038c870df77685ac43e3f95825a021751fec
- MD5 0885333e212ce3eee43a394649c6784a
- SHA1 74b9fee491fdfe14486447c62e8778a99e6fd1a3
- SHA512 8975fc318047ede1083d5ef53a6059c1bcd0d394771b82121be3be37040f7ad867cada5baaaa64422aeef88b31baa3b6b4076a7013f0cf5cd23d3760412b1d72
- SSDEEP 1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+CK1xxKY+T6KWs:LJ0TAz6Mte4A+aaZx8EnCGVuCcnDKWs
- TLSH T120D3E120B2CB81F2E097527502DE9277AC3E10A6471EE6F7D6E476E3AD113F1B235088
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
UPX dump on OEP (original entry point)