General
- Target 2026-04-20_723440f8fb4bfbe2ad0b15f87a44769f_amadey_coinminer_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 560KB
- Sample260420-ele25acv2x
- SHA256 96078391410ca8e15c61b6690fc638c7c8f35ca54767dd1adc51d89c99c6f0fb
- MD5 723440f8fb4bfbe2ad0b15f87a44769f
- SHA1 0da61c96b14d66ac22eb7ea333bb431b230c0567
- SHA512 18934974a75fbd0ce724e2f632a208950db71de78ca362d8e06239ac315cb5ef593b5dfd4f0c6bce587c177feaf82c10ba54be9de688a7078276ddf8555b05b1
- SSDEEP 12288:C3Sgbu4VOGWPSqt6IpouYgCEmx1z725uRG9OArjlI6YeLm08XsOkx2LIa+y:SVOL4/gPXKCOkx2LFR
- TLSH T1F2C46D2AB6E0D076C4B79574C4A256A6FFB1B43127204ACF6390475A1F637E2BE3530E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-04-20_723440f8fb4bfbe2ad0b15f87a44769f_amadey_coinminer_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260130-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-20_723440f8fb4bfbe2ad0b15f87a44769f_amadey_coinminer_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win11-20260130-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-20_723440f8fb4bfbe2ad0b15f87a44769f_amadey_coinminer_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 560KB
- SHA256 96078391410ca8e15c61b6690fc638c7c8f35ca54767dd1adc51d89c99c6f0fb
- MD5 723440f8fb4bfbe2ad0b15f87a44769f
- SHA1 0da61c96b14d66ac22eb7ea333bb431b230c0567
- SHA512 18934974a75fbd0ce724e2f632a208950db71de78ca362d8e06239ac315cb5ef593b5dfd4f0c6bce587c177feaf82c10ba54be9de688a7078276ddf8555b05b1
- SSDEEP 12288:C3Sgbu4VOGWPSqt6IpouYgCEmx1z725uRG9OArjlI6YeLm08XsOkx2LIa+y:SVOL4/gPXKCOkx2LFR
- TLSH T1F2C46D2AB6E0D076C4B79574C4A256A6FFB1B43127204ACF6390475A1F637E2BE3530E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10- Custom signature
UPX dump on OEP (original entry point)
Executes dropped EXE
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
Drops file in System32 directory