General
- Target 2026-08-23_81289b65d50da59666fe14e3897b2166_coinminer_elex_rhadamanthys_stop
- Size 128KB
- Sample260824-jcfdrathkd
- SHA256 8b8e6e55e586ea1cc40ee776245fc55ea7cc4369fc1127448591fdb502f8464d
- MD5 81289b65d50da59666fe14e3897b2166
- SHA1 cb62967f5c6db1783c7494b906efe3d657dddffd
- SHA512 f8b66eb02c9274063b9723aab62b487d58e20238dc9c008bb95f8e0b25ffb13ced187dd39772cd7dc143b00e1c8b0b64187d651f25e519af07e83b7da0d9475e
- SSDEEP 1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+1K1xxKY+T6KWs:LJ0TAz6Mte4A+aaZx8EnCGVu1cnDKWs
- TLSH T188D3E120B2CB81F2E097527502DE9277AC3E10A6471EE6F7D6E476E3AD113F1B235088
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-23_81289b65d50da59666fe14e3897b2166_coinminer_elex_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-23_81289b65d50da59666fe14e3897b2166_coinminer_elex_rhadamanthys_stop.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
snojan
C2
-
http://wecan.hasthe.technology/upload
Targets
-
- Target 2026-08-23_81289b65d50da59666fe14e3897b2166_coinminer_elex_rhadamanthys_stop
- Size 128KB
- SHA256 8b8e6e55e586ea1cc40ee776245fc55ea7cc4369fc1127448591fdb502f8464d
- MD5 81289b65d50da59666fe14e3897b2166
- SHA1 cb62967f5c6db1783c7494b906efe3d657dddffd
- SHA512 f8b66eb02c9274063b9723aab62b487d58e20238dc9c008bb95f8e0b25ffb13ced187dd39772cd7dc143b00e1c8b0b64187d651f25e519af07e83b7da0d9475e
- SSDEEP 1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+1K1xxKY+T6KWs:LJ0TAz6Mte4A+aaZx8EnCGVu1cnDKWs
- TLSH T188D3E120B2CB81F2E097527502DE9277AC3E10A6471EE6F7D6E476E3AD113F1B235088
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
UPX dump on OEP (original entry point)