General
- Target 2026-08-20_8f8d902d38024b221ced368de36a222a_coinminer_elex_rhadamanthys_stop
- Size 144KB
- Sample260820-petl2swfqc
- SHA256 183b4be754de9b6de7d96ec63755f679b01a627aa666c852b14d514a6a012d96
- MD5 8f8d902d38024b221ced368de36a222a
- SHA1 0d383be3ec41381efdb36b88d4fe0383bb6e99dd
- SHA512 58ac8f660b53e512b3f40a2d63dafda26f5e81701007d975d9409bc914af9de76145da9399535b8243b9681370b35bd37bfb4700acc5be439c88e90b41bf4159
- SSDEEP 1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+PK1xxKY+T6KWl:LJ0TAz6Mte4A+aaZx8EnCGVuPcnDKW1P
- TLSH T136E3E120A2D680F2D493627502AD86779D3E1077072EE6E7D7E576A3AD213F1F23608D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-20_8f8d902d38024b221ced368de36a222a_coinminer_elex_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-20_8f8d902d38024b221ced368de36a222a_coinminer_elex_rhadamanthys_stop.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
snojan
C2
-
http://wecan.hasthe.technology/upload
Targets
-
- Target 2026-08-20_8f8d902d38024b221ced368de36a222a_coinminer_elex_rhadamanthys_stop
- Size 144KB
- SHA256 183b4be754de9b6de7d96ec63755f679b01a627aa666c852b14d514a6a012d96
- MD5 8f8d902d38024b221ced368de36a222a
- SHA1 0d383be3ec41381efdb36b88d4fe0383bb6e99dd
- SHA512 58ac8f660b53e512b3f40a2d63dafda26f5e81701007d975d9409bc914af9de76145da9399535b8243b9681370b35bd37bfb4700acc5be439c88e90b41bf4159
- SSDEEP 1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+PK1xxKY+T6KWl:LJ0TAz6Mte4A+aaZx8EnCGVuPcnDKW1P
- TLSH T136E3E120A2D680F2D493627502AD86779D3E1077072EE6E7D7E576A3AD213F1F23608D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
UPX dump on OEP (original entry point)