General
- Target 2026-08-24_25b436cd6afd79c326c1b9af2443f287_coinminer_elex_rhadamanthys_stop
- Size 144KB
- Sample260825-vla16scn2t
- SHA256 f08d7c161560715d58350734aafd2529f4d33bfa1dad17b11916e02358144d89
- MD5 25b436cd6afd79c326c1b9af2443f287
- SHA1 b07b5a29125ba33a593af4a977fb1e7ee343f601
- SHA512 7306898b7e023d91687b467392efbcd34830aac79c58f97959eaf73ff43e3d54607dbe1f26cc090b75ede289afcd9c8d0f7ec616ed43c14373838aeecad44c31
- SSDEEP 1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+lK1xxKY+T6KWl:LJ0TAz6Mte4A+aaZx8EnCGVulcnDKW1P
- TLSH T121E3E120A2D680F2D493627502AD86779D3E1077072EE6E7D7E576A3AD213F1F23608D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-24_25b436cd6afd79c326c1b9af2443f287_coinminer_elex_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-24_25b436cd6afd79c326c1b9af2443f287_coinminer_elex_rhadamanthys_stop.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
snojan
C2
-
http://wecan.hasthe.technology/upload
Targets
-
- Target 2026-08-24_25b436cd6afd79c326c1b9af2443f287_coinminer_elex_rhadamanthys_stop
- Size 144KB
- SHA256 f08d7c161560715d58350734aafd2529f4d33bfa1dad17b11916e02358144d89
- MD5 25b436cd6afd79c326c1b9af2443f287
- SHA1 b07b5a29125ba33a593af4a977fb1e7ee343f601
- SHA512 7306898b7e023d91687b467392efbcd34830aac79c58f97959eaf73ff43e3d54607dbe1f26cc090b75ede289afcd9c8d0f7ec616ed43c14373838aeecad44c31
- SSDEEP 1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+lK1xxKY+T6KWl:LJ0TAz6Mte4A+aaZx8EnCGVulcnDKW1P
- TLSH T121E3E120A2D680F2D493627502AD86779D3E1077072EE6E7D7E576A3AD213F1F23608D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
UPX dump on OEP (original entry point)