General

  • Target
    2026-09-04_13a6ce74e1aee5a6f13db0db2a10c462_coinminer_elex_rhadamanthys_stop
  • Size 144KB
  • Sample260905-wkpcvazblg
  • SHA256 c26815553274e45a5cbe10308db253e2df3e70a480206b2864939179fa791cbd
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Extracted

Family
  • snojan

C2
  • http://wecan.hasthe.technology/upload

Targets

    • Target
      2026-09-04_13a6ce74e1aee5a6f13db0db2a10c462_coinminer_elex_rhadamanthys_stop
    • Size 144KB
    • SHA256 c26815553274e45a5cbe10308db253e2df3e70a480206b2864939179fa791cbd
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Family: Snojan

      Snojan is a downloader used to drop and execute other malware.

    • UPX dump on OEP (original entry point)

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v16

Tasks