General
- Target 2026-08-20_c29e5a9cf4cfdcb7a8bb034df82cebc9_coinminer_elex_redline-stealer_rhadamanthys_stop
- Size 291KB
- Sample260820-nlynxawblh
- SHA256 82a4500153567911e3c57696c661339a72eaa82016e0eb3da205b9b46463051d
- MD5 c29e5a9cf4cfdcb7a8bb034df82cebc9
- SHA1 d8be4ab3cc4122f8f011ee1a960e60edf3a4d2b4
- SHA512 b51ff301dc54cbf5d25694e4908477b4c2cfa2511bcf19ffdd976b01183ebe4cf8515da8313a5a4a8cffec3470aec8fea8cd3f5dee60a4a171905c91ecdab01d
- SSDEEP 3072:0JWhL0cgHsQB8BPFvdRcF8rFz1wxayNM3coteYnwrZwuhT7kr++rY9:0ghLWsQmpcF8BzXfwVTTIr+N
- TLSH T14C544A1272808071E7550B78045AE7A14ABE7D340BB5D68FF7A43B7A5E702D3A93721F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-20_c29e5a9cf4cfdcb7a8bb034df82cebc9_coinminer_elex_redline-stealer_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Malware Config
Extracted
Family
-
systex
C2
-
http://xytets.com:2345/t.asp?os=wangba8102
-
http://xytets.com:2345/ll/out.txt
-
http://xytets.com:2345/t.asp?os=home8102
Targets
-
- Target 2026-08-20_c29e5a9cf4cfdcb7a8bb034df82cebc9_coinminer_elex_redline-stealer_rhadamanthys_stop
- Size 291KB
- SHA256 82a4500153567911e3c57696c661339a72eaa82016e0eb3da205b9b46463051d
- MD5 c29e5a9cf4cfdcb7a8bb034df82cebc9
- SHA1 d8be4ab3cc4122f8f011ee1a960e60edf3a4d2b4
- SHA512 b51ff301dc54cbf5d25694e4908477b4c2cfa2511bcf19ffdd976b01183ebe4cf8515da8313a5a4a8cffec3470aec8fea8cd3f5dee60a4a171905c91ecdab01d
- SSDEEP 3072:0JWhL0cgHsQB8BPFvdRcF8rFz1wxayNM3coteYnwrZwuhT7kr++rY9:0ghLWsQmpcF8BzXfwVTTIr+N
- TLSH T14C544A1272808071E7550B78045AE7A14ABE7D340BB5D68FF7A43B7A5E702D3A93721F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE