General
- Target 2026-09-01_20d06fa6ff0f218d0d897aaade411c3a_coinminer_elex_rhadamanthys_stop
- Size 144KB
- Sample260903-shzh9awthy
- SHA256 a5939deac6eefd4fac90dbd8c43c6226dece33791cb673df6b166778f482143a
- MD5 20d06fa6ff0f218d0d897aaade411c3a
- SHA1 2b74017fb68c0127b0c85d61c739c5924664c364
- SHA512 39444c9615c4ddccf68f3074f168de4ee9f1b942f50f01932b35aef6cec1b71c52afc1dbee8384e56cc5d55fb94830ceadf5de81151d6292a64a4748ff275c95
- SSDEEP 1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+5K1xxKY+T6KWl:LJ0TAz6Mte4A+aaZx8EnCGVu5cnDKW1P
- TLSH T192E3E120A2D680F2D493627502AD86779D3E1077072EE6E7D7E576A3AD213F1F23608D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-09-01_20d06fa6ff0f218d0d897aaade411c3a_coinminer_elex_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-01_20d06fa6ff0f218d0d897aaade411c3a_coinminer_elex_rhadamanthys_stop.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
snojan
C2
-
http://wecan.hasthe.technology/upload
Targets
-
- Target 2026-09-01_20d06fa6ff0f218d0d897aaade411c3a_coinminer_elex_rhadamanthys_stop
- Size 144KB
- SHA256 a5939deac6eefd4fac90dbd8c43c6226dece33791cb673df6b166778f482143a
- MD5 20d06fa6ff0f218d0d897aaade411c3a
- SHA1 2b74017fb68c0127b0c85d61c739c5924664c364
- SHA512 39444c9615c4ddccf68f3074f168de4ee9f1b942f50f01932b35aef6cec1b71c52afc1dbee8384e56cc5d55fb94830ceadf5de81151d6292a64a4748ff275c95
- SSDEEP 1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+5K1xxKY+T6KWl:LJ0TAz6Mte4A+aaZx8EnCGVu5cnDKW1P
- TLSH T192E3E120A2D680F2D493627502AD86779D3E1077072EE6E7D7E576A3AD213F1F23608D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
UPX dump on OEP (original entry point)