33d4ab6052a960c68aebe7bbc74204ccd8d237f8318c87603447c2d2da846c24

Analysis

max time kernel
149s
max time network
121s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
16/04/2026, 15:01

Target
2026-04-16_cec0f99e617c4d695102ba553e521b51_amadey_coinminer_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop.exe
Size 2.9MB
Sample260416-sd4bmscv5q
SHA256 33d4ab6052a960c68aebe7bbc74204ccd8d237f8318c87603447c2d2da846c24
MD5 cec0f99e617c4d695102ba553e521b51
SHA1 b7784ce821b30af55fbf6997155e5623d1ed8369
SHA512 37a3387e96620f70157d8726a6e8b78df0907fb9b2bf04db871931c0b41f9f50bd66af57634e8d1645df77f23d7b4663ff6e5fef288fadd3a7aaad9b0cf664f8
SSDEEP 49152:WavV7uNRXNx/avV7uNRXNxKK9Nv4oJdXN0BMOwLloBrugs73:r4R9xM4R9xKSvXJdXN0B7+sK73
TLSH
T1B4D5AE2677A4C03AE0B24674997987A59575BE311F22C6CFA6803B1D2F71BC2D932337
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
3680	4660	WerFault.exe	77

C:\Users\Admin\AppData\Local\Temp\2026-04-16_cec0f99e617c4d695102ba553e521b51_amadey_coinminer_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop.exe
"C:\Users\Admin\AppData\Local\Temp\2026-04-16_cec0f99e617c4d695102ba553e521b51_amadey_coinminer_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop.exe"
1⤵
PID:4660
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4660 -s 8
  2⤵
  - Program crash
  PID:3680

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 4660 -ip 4660
1⤵
PID:4848