General
- Target 2026-10-26_e89bd727c74eb1aae5db636bb0c65343_coinminer_elex_rhadamanthys_smoke-loader_stealc_stop
- Size 160KB
- Sample261027-ebwxwsbs4r
- SHA256 04f3567a5778dacb584e3daa8378f3af47aed82a943bcad248c5af30a1a6d8e1
- MD5 e89bd727c74eb1aae5db636bb0c65343
- SHA1 14737eaa4f32da81379046f0f304daf78423b6e8
- SHA512 4c4a7f283adc5a8e65d04351dd2ac1a69ecc384f80f5f42dcb741f60af78656b6b0842d794bf73b771556f58cf48e409e479b0e0c1851c0fdb4e81228babd92c
- SSDEEP 3072:LJ0TAz6Mte4A+aaZx8EnCGVu3cnDKW1LgppLo:NrFZaaZmEJucDKW1Lgbo
- TLSH T174F3D020B2D2C0B6D4976175426987739D7D1072072EE6E7E7E63AB29E213F1F23608D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-10-26_e89bd727c74eb1aae5db636bb0c65343_coinminer_elex_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-26_e89bd727c74eb1aae5db636bb0c65343_coinminer_elex_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win11ltsc2024-20260911-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
snojan
C2
-
http://wecan.hasthe.technology/upload
Targets
-
- Target 2026-10-26_e89bd727c74eb1aae5db636bb0c65343_coinminer_elex_rhadamanthys_smoke-loader_stealc_stop
- Size 160KB
- SHA256 04f3567a5778dacb584e3daa8378f3af47aed82a943bcad248c5af30a1a6d8e1
- MD5 e89bd727c74eb1aae5db636bb0c65343
- SHA1 14737eaa4f32da81379046f0f304daf78423b6e8
- SHA512 4c4a7f283adc5a8e65d04351dd2ac1a69ecc384f80f5f42dcb741f60af78656b6b0842d794bf73b771556f58cf48e409e479b0e0c1851c0fdb4e81228babd92c
- SSDEEP 3072:LJ0TAz6Mte4A+aaZx8EnCGVu3cnDKW1LgppLo:NrFZaaZmEJucDKW1Lgbo
- TLSH T174F3D020B2D2C0B6D4976175426987739D7D1072072EE6E7E7E63AB29E213F1F23608D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10- Custom signature
UPX dump on OEP (original entry point)