2026-10-08_3b994ee2577d2de50676ec6083b4d071_coinminer_elex_rhadamanthys_smoke-loader_stop

Sharing

Copy URL Twitter E-mail

General

Target
2026-10-08_3b994ee2577d2de50676ec6083b4d071_coinminer_elex_rhadamanthys_smoke-loader_stop
Size 2.3MB
Sample261009-vecanast3l
SHA256 69af8e5e3e3d316383e092beb29b4bca96c592b9a89e99ca47021b643bccde1b
MD5 3b994ee2577d2de50676ec6083b4d071
SHA1 876cb040fdebf645c6f13217ae714599a285d271
SHA512 3b8563ac733a290b0eb1fc5055d43bdb5a8e91d849e7cac988aabfcf6d1fb92878084978666b4d85d0071deecb5cf1e835758fd65a6ef363956e2b477ff0c877
SSDEEP 24576:ffGIsqjnhMgeiCl7G0nehbGZpbDLNxhbHdDPXL5871u8ioEJpyLhhlAKjeCienk:ffG0Dmg27RnWGjpnJbXL27dE/xIeyk
TLSH
T1FDB52337B2E9C0B3F97705B045E6C329AD26BD329D3941536BEA0D5C7FA19448B3E281
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-08_3b994ee2577d2de50676ec6083b4d071_coinminer_elex_rhadamanthys_smoke-loader_stop

File Explorer

2026-10-08_3b994ee2577d2de50676ec6083b4d071_coinminer_elex_rhadamanthys_smoke-loader_stop

.exe 2.3MB

2026-10-08_3b994ee2577d2de50676ec6083b4d071_coinminer_elex_rhadamanthys_smoke-loader_stop

IMPHASH 3633c4654a13ee20f83d0b2f70ead08a
SHA256 69af8e5e3e3d316383e092beb29b4bca96c592b9a89e99ca47021b643bccde1b
MD5 3b994ee2577d2de50676ec6083b4d071
SHA1 876cb040fdebf645c6f13217ae714599a285d271
SHA512 3b8563ac733a290b0eb1fc5055d43bdb5a8e91d849e7cac988aabfcf6d1fb92878084978666b4d85d0071deecb5cf1e835758fd65a6ef363956e2b477ff0c877
SSDEEP 24576:ffGIsqjnhMgeiCl7G0nehbGZpbDLNxhbHdDPXL5871u8ioEJpyLhhlAKjeCienk:ffG0Dmg27RnWGjpnJbXL27dE/xIeyk
TLSH
T1FDB52337B2E9C0B3F97705B045E6C329AD26BD329D3941536BEA0D5C7FA19448B3E281
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

51566

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

e:\landun\workspace\p-ad0484fbdfe349d18f6d70b4084a70ba\src\product\win32\dbginfo\menuhelper.pdb

kernel32

CreateFileW GetFileSize FlushFileBuffers LoadResource WideCharToMultiByte MultiByteToWideChar GetLastError LockResource RaiseException FindResourceExW FindResourceW SizeofResource GetModuleFileNameW GetFileAttributesW CreateFileA LoadLibraryW EnterCriticalSection GetProcAddress LeaveCriticalSection InitializeCriticalSection DeleteCriticalSection GetPrivateProfileStringW FreeLibrary GetVersionExW GetSystemDirectoryW GetModuleHandleW ReadFile WriteFile SetFilePointer CloseHandle WriteConsoleW GetConsoleOutputCP WriteConsoleA SetStdHandle LoadLibraryA GetConsoleMode InterlockedExchange GetACP GetLocaleInfoA GetThreadLocale GetVersionExA HeapDestroy HeapAlloc HeapFree HeapReAlloc HeapSize GetProcessHeap TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetSystemTimeAsFileTime GetStartupInfoW GetCPInfo InterlockedIncrement InterlockedDecrement GetOEMCP IsValidCodePage GetModuleHandleA TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId LCMapStringA LCMapStringW HeapCreate VirtualFree VirtualAlloc Sleep ExitProcess GetStdHandle GetModuleFileNameA SetHandleCount GetFileType GetStartupInfoA RtlUnwind FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineA GetCommandLineW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetStringTypeA GetStringTypeW GetConsoleCP

advapi32

RegOpenKeyExW RegCloseKey RegOpenKeyW RegQueryValueExW

ole32

CLSIDFromString

shlwapi

PathFileExistsW

version

GetFileVersionInfoW VerQueryValueW GetFileVersionInfoSizeW

user32

UnregisterClassA

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-08_3b994ee2577d2de50676ec6083b4d071_coinminer_elex_rhadamanthys_smoke-loader_stop

kernel32

advapi32

ole32

shlwapi

version

user32

generic