General
- Target 2026-08-24_f96211a5748085043abad75ec5f7a46b_coinminer_elex_rhadamanthys_stop
- Size 144KB
- Sample260824-x77clsyvct
- SHA256 9e1a35b80dacd48efa496f42b0345e857108d4310983aa9afa5e1ece406ce89e
- MD5 f96211a5748085043abad75ec5f7a46b
- SHA1 99147661538d7a24d87723221e2a93540b2d77ae
- SHA512 7ae610a22338c425ea1b55083ca335158bf63842cb2f060e28710606beebed4ec5e48dde1ab35770389dc198b728e689a8b0d2eecb296cb656b862333d617d67
- SSDEEP 1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+JK1xxKY+T6KWl:LJ0TAz6Mte4A+aaZx8EnCGVuJcnDKW1P
- TLSH T172E3E120A2D680F2D493627502AD86779D3E1077072EE6E7D7E576A3AD213F1F23608D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-24_f96211a5748085043abad75ec5f7a46b_coinminer_elex_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-24_f96211a5748085043abad75ec5f7a46b_coinminer_elex_rhadamanthys_stop.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
snojan
C2
-
http://wecan.hasthe.technology/upload
Targets
-
- Target 2026-08-24_f96211a5748085043abad75ec5f7a46b_coinminer_elex_rhadamanthys_stop
- Size 144KB
- SHA256 9e1a35b80dacd48efa496f42b0345e857108d4310983aa9afa5e1ece406ce89e
- MD5 f96211a5748085043abad75ec5f7a46b
- SHA1 99147661538d7a24d87723221e2a93540b2d77ae
- SHA512 7ae610a22338c425ea1b55083ca335158bf63842cb2f060e28710606beebed4ec5e48dde1ab35770389dc198b728e689a8b0d2eecb296cb656b862333d617d67
- SSDEEP 1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+JK1xxKY+T6KWl:LJ0TAz6Mte4A+aaZx8EnCGVuJcnDKW1P
- TLSH T172E3E120A2D680F2D493627502AD86779D3E1077072EE6E7D7E576A3AD213F1F23608D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
UPX dump on OEP (original entry point)