General
- Target 2026-08-21_8209f3d899dfb5bf9994d5dd16abb757_coinminer_elex_rhadamanthys_stop
- Size 144KB
- Sample260822-nrspvatela
- SHA256 47e3afb0278299da61230d24fb5f80c56e596c96f8870bfe551764c42f7e8d5d
- MD5 8209f3d899dfb5bf9994d5dd16abb757
- SHA1 6512ec5d55e1df0c6f473f468d9f1f03b9db17c1
- SHA512 a08fb62608a4f56f19ffe6a6519ad85033f6c7b10fff63df6cf14f4100b08c2ec1bf6697d45018c1ae90cf8bf1fae1d0148f85b931f6241beac825e874d32c8a
- SSDEEP 1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+yK1xxKY+T6KWl:LJ0TAz6Mte4A+aaZx8EnCGVuycnDKW1P
- TLSH T199E3E120A2D680F2D493627502AD86779D3E1077072EE6E7D7E576A3AD213F1F23608D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-21_8209f3d899dfb5bf9994d5dd16abb757_coinminer_elex_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-21_8209f3d899dfb5bf9994d5dd16abb757_coinminer_elex_rhadamanthys_stop.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
snojan
C2
-
http://wecan.hasthe.technology/upload
Targets
-
- Target 2026-08-21_8209f3d899dfb5bf9994d5dd16abb757_coinminer_elex_rhadamanthys_stop
- Size 144KB
- SHA256 47e3afb0278299da61230d24fb5f80c56e596c96f8870bfe551764c42f7e8d5d
- MD5 8209f3d899dfb5bf9994d5dd16abb757
- SHA1 6512ec5d55e1df0c6f473f468d9f1f03b9db17c1
- SHA512 a08fb62608a4f56f19ffe6a6519ad85033f6c7b10fff63df6cf14f4100b08c2ec1bf6697d45018c1ae90cf8bf1fae1d0148f85b931f6241beac825e874d32c8a
- SSDEEP 1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+yK1xxKY+T6KWl:LJ0TAz6Mte4A+aaZx8EnCGVuycnDKW1P
- TLSH T199E3E120A2D680F2D493627502AD86779D3E1077072EE6E7D7E576A3AD213F1F23608D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
UPX dump on OEP (original entry point)