General
- Target 2026-08-27_9975b4693e58c31a71ea224a4d146122_coinminer_elex_rhadamanthys_stop
- Size 144KB
- Sample260827-n8ffvatfrd
- SHA256 5e942abe9ea0df2bce2b511dcd33ed584c97f9f74e3067dd060e61c2f90f442f
- MD5 9975b4693e58c31a71ea224a4d146122
- SHA1 6f44af0ac873fc5e347b9dc448cf26a7dc82dd80
- SHA512 6246ac9886bb51fc7c3f9c4fd68c178fe9a393b6d2ed9f8ef96b5362d81f95d73df497c4e792a0ad98a8beccb2a321005f058f7ae5c1deb9564859426e82ea6d
- SSDEEP 1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+MK1xxKY+T6KWl:LJ0TAz6Mte4A+aaZx8EnCGVuMcnDKW1P
- TLSH T139E3E120A2D680F2D493627502AD82779D3E1077032EE6E7D7E576A3AD213F1F23608D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-27_9975b4693e58c31a71ea224a4d146122_coinminer_elex_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-27_9975b4693e58c31a71ea224a4d146122_coinminer_elex_rhadamanthys_stop.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
snojan
C2
-
http://wecan.hasthe.technology/upload
Targets
-
- Target 2026-08-27_9975b4693e58c31a71ea224a4d146122_coinminer_elex_rhadamanthys_stop
- Size 144KB
- SHA256 5e942abe9ea0df2bce2b511dcd33ed584c97f9f74e3067dd060e61c2f90f442f
- MD5 9975b4693e58c31a71ea224a4d146122
- SHA1 6f44af0ac873fc5e347b9dc448cf26a7dc82dd80
- SHA512 6246ac9886bb51fc7c3f9c4fd68c178fe9a393b6d2ed9f8ef96b5362d81f95d73df497c4e792a0ad98a8beccb2a321005f058f7ae5c1deb9564859426e82ea6d
- SSDEEP 1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+MK1xxKY+T6KWl:LJ0TAz6Mte4A+aaZx8EnCGVuMcnDKW1P
- TLSH T139E3E120A2D680F2D493627502AD82779D3E1077032EE6E7D7E576A3AD213F1F23608D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
UPX dump on OEP (original entry point)