General
- Target 2026-08-24_655634d584f31ee464e4c5f408ce109d_coinminer_elex_rhadamanthys_stop
- Size 144KB
- Sample260825-ns449shp41
- SHA256 2c4bf8c011bf785290d272500e86a917218931912116e54399d06c1a86776475
- MD5 655634d584f31ee464e4c5f408ce109d
- SHA1 99addd0f389a39572d238a529a7aabcf1abad0f5
- SHA512 f282d771a2e366ef0617ebaa924ef89ae7f811d2d0e0c3dc5e61bfb0189052993b1f8169a70a8294f7c01813f970cf3f627cfe1686a579adf4928866732f2a89
- SSDEEP 1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+cK1xxKY+T6KWl:LJ0TAz6Mte4A+aaZx8EnCGVuccnDKW1P
- TLSH T127E3E120A2D680F2D493627502AD86779D3E1077072EE6E7D7E576A3AD213F1F23608D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-24_655634d584f31ee464e4c5f408ce109d_coinminer_elex_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-24_655634d584f31ee464e4c5f408ce109d_coinminer_elex_rhadamanthys_stop.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
snojan
C2
-
http://wecan.hasthe.technology/upload
Targets
-
- Target 2026-08-24_655634d584f31ee464e4c5f408ce109d_coinminer_elex_rhadamanthys_stop
- Size 144KB
- SHA256 2c4bf8c011bf785290d272500e86a917218931912116e54399d06c1a86776475
- MD5 655634d584f31ee464e4c5f408ce109d
- SHA1 99addd0f389a39572d238a529a7aabcf1abad0f5
- SHA512 f282d771a2e366ef0617ebaa924ef89ae7f811d2d0e0c3dc5e61bfb0189052993b1f8169a70a8294f7c01813f970cf3f627cfe1686a579adf4928866732f2a89
- SSDEEP 1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+cK1xxKY+T6KWl:LJ0TAz6Mte4A+aaZx8EnCGVuccnDKW1P
- TLSH T127E3E120A2D680F2D493627502AD86779D3E1077072EE6E7D7E576A3AD213F1F23608D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
UPX dump on OEP (original entry point)