General
- Target 2026-04-15_1c827e039cd77e42d29b24b9bca842d3_amadey_coinminer_elex_luca-stealer_njrat_nymaim_remcos_rhadamanthys_smoke-loader
- Size 751KB
- Sample260415-2ynlcsdy7y
- SHA256 c13a4172d654089cd361fd92cb6f3695ab28a6c1d418e3c7a80131af83a75585
- MD5 1c827e039cd77e42d29b24b9bca842d3
- SHA1 cf1f3143de4adaf51a674e7d4f8cde906022351b
- SHA512 2680d4bd46dfee2a1fdb0af438d2d6b79f3ff86c8ad8ea3c8314f8ded52c9b69520577f287d6c9a12005a8822112908067b2bedc3d5426114f38c40c2e078b43
- SSDEEP 12288:3lG8lBe5mWukhI2jFMSjysAS9X/GsfTDYrGigYLBrhoMZv9GYOXd56hDnmgO:3lGN5mWpI2jFM5sFzfTpiTLbo8NON56u
- TLSH T15DF49E32A5614036E7F101B3B928D5307D7CE328175089AAE3D4EE1D3E748D26BBB657
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-15_1c827e039cd77e42d29b24b9bca842d3_amadey_coinminer_elex_luca-stealer_njrat_nymaim_remcos_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260130-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-15_1c827e039cd77e42d29b24b9bca842d3_amadey_coinminer_elex_luca-stealer_njrat_nymaim_remcos_rhadamanthys_smoke-loader
- Size 751KB
- SHA256 c13a4172d654089cd361fd92cb6f3695ab28a6c1d418e3c7a80131af83a75585
- MD5 1c827e039cd77e42d29b24b9bca842d3
- SHA1 cf1f3143de4adaf51a674e7d4f8cde906022351b
- SHA512 2680d4bd46dfee2a1fdb0af438d2d6b79f3ff86c8ad8ea3c8314f8ded52c9b69520577f287d6c9a12005a8822112908067b2bedc3d5426114f38c40c2e078b43
- SSDEEP 12288:3lG8lBe5mWukhI2jFMSjysAS9X/GsfTDYrGigYLBrhoMZv9GYOXd56hDnmgO:3lGN5mWpI2jFM5sFzfTpiTLbo8NON56u
- TLSH T15DF49E32A5614036E7F101B3B928D5307D7CE328175089AAE3D4EE1D3E748D26BBB657
- MD5 SHA1 SHA512 SSDEEP TLSH
Executes dropped EXE
Loads dropped DLL
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
Drops file in System32 directory