General
- Target 2026-09-05_6417dbcc9f655ee241e5a3ac653297e4_coinminer_elex_rhadamanthys_stop
- Size 128KB
- Sample260907-ynezpasyex
- SHA256 00f9fb61459af9de7c3e4a6137df862f39582eb6cf3a5d8f2667b64a368562ec
- MD5 6417dbcc9f655ee241e5a3ac653297e4
- SHA1 aea2fc5db4b6bfcb326be29d968ff01f72c6ec46
- SHA512 d2605bcf64096726a886561a84c82960f4ea41999bbb49f97ae4d7e869a501ddd27248513c69e88a88955896af9d867e90c1a8febf57433dcd710d6b6aeda571
- SSDEEP 1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+kK1xxKY+T6KWs:LJ0TAz6Mte4A+aaZx8EnCGVukcnDKWs
- TLSH T1ACD3E120B2CB81F6E097527502DE9277AC3E10A6471EE6F7D6E476E3AD113F1B235089
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-09-05_6417dbcc9f655ee241e5a3ac653297e4_coinminer_elex_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-05_6417dbcc9f655ee241e5a3ac653297e4_coinminer_elex_rhadamanthys_stop.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
snojan
C2
-
http://wecan.hasthe.technology/upload
Targets
-
- Target 2026-09-05_6417dbcc9f655ee241e5a3ac653297e4_coinminer_elex_rhadamanthys_stop
- Size 128KB
- SHA256 00f9fb61459af9de7c3e4a6137df862f39582eb6cf3a5d8f2667b64a368562ec
- MD5 6417dbcc9f655ee241e5a3ac653297e4
- SHA1 aea2fc5db4b6bfcb326be29d968ff01f72c6ec46
- SHA512 d2605bcf64096726a886561a84c82960f4ea41999bbb49f97ae4d7e869a501ddd27248513c69e88a88955896af9d867e90c1a8febf57433dcd710d6b6aeda571
- SSDEEP 1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+kK1xxKY+T6KWs:LJ0TAz6Mte4A+aaZx8EnCGVukcnDKWs
- TLSH T1ACD3E120B2CB81F6E097527502DE9277AC3E10A6471EE6F7D6E476E3AD113F1B235089
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
UPX dump on OEP (original entry point)