General
- Target 2026-09-04_13a6ce74e1aee5a6f13db0db2a10c462_coinminer_elex_rhadamanthys_stop
- Size 144KB
- Sample260905-wkpcvazblg
- SHA256 c26815553274e45a5cbe10308db253e2df3e70a480206b2864939179fa791cbd
- MD5 13a6ce74e1aee5a6f13db0db2a10c462
- SHA1 c64a39b592fd5134af424010effc4f6bca1bed57
- SHA512 4299ef282950bb77d758508f35dc62d0bf080faa0a616648beaff29292457e433540716b56c4f8002529999a8aa75296f10ce9d1caec81f111d1de898aaed6ff
- SSDEEP 1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+IK1xxKY+T6KWl:LJ0TAz6Mte4A+aaZx8EnCGVuIcnDKW1P
- TLSH T1CBE3E120A2D680F2D493627502AD86779D3E1077072EE6E7D7E576A3AD213F1F23608D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-09-04_13a6ce74e1aee5a6f13db0db2a10c462_coinminer_elex_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-04_13a6ce74e1aee5a6f13db0db2a10c462_coinminer_elex_rhadamanthys_stop.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
snojan
C2
-
http://wecan.hasthe.technology/upload
Targets
-
- Target 2026-09-04_13a6ce74e1aee5a6f13db0db2a10c462_coinminer_elex_rhadamanthys_stop
- Size 144KB
- SHA256 c26815553274e45a5cbe10308db253e2df3e70a480206b2864939179fa791cbd
- MD5 13a6ce74e1aee5a6f13db0db2a10c462
- SHA1 c64a39b592fd5134af424010effc4f6bca1bed57
- SHA512 4299ef282950bb77d758508f35dc62d0bf080faa0a616648beaff29292457e433540716b56c4f8002529999a8aa75296f10ce9d1caec81f111d1de898aaed6ff
- SSDEEP 1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+IK1xxKY+T6KWl:LJ0TAz6Mte4A+aaZx8EnCGVuIcnDKW1P
- TLSH T1CBE3E120A2D680F2D493627502AD86779D3E1077072EE6E7D7E576A3AD213F1F23608D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
UPX dump on OEP (original entry point)