General
- Target 2026-04-21_6b93f3057cce06cc42c78f3bb7b7a5a4_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 395KB
- Sample260422-a71thae15j
- SHA256 7395b9090cee2475a55c2175322ab02d3f86fb2bb751257f176dc1b9ff2fbf72
- MD5 6b93f3057cce06cc42c78f3bb7b7a5a4
- SHA1 eafae3159d071dfe6b696cc3e97976859d9d373a
- SHA512 934646fd0b97fa60f9c93eab572ffb37f0af7af7afae9cee78634743ccd1d81c436deeb7416ca3b8f57f345fd2d297019a3ecc3370f2e3c36020a002b078170f
- SSDEEP 12288:E3Sgbu4VOGWPSqt6IpouYgCEmx1z725uRG9OArjlI6YmLm08dOkx2LIaxy:IVOL4/gPnKHOkx2LFE
- TLSH T13B845C2AB6E0D076C4B79574C4A257A6FBB1B43227204ACF6390475A1F237E2BD3531E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-21_6b93f3057cce06cc42c78f3bb7b7a5a4_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260130-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-21_6b93f3057cce06cc42c78f3bb7b7a5a4_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win11-20260130-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-21_6b93f3057cce06cc42c78f3bb7b7a5a4_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 395KB
- SHA256 7395b9090cee2475a55c2175322ab02d3f86fb2bb751257f176dc1b9ff2fbf72
- MD5 6b93f3057cce06cc42c78f3bb7b7a5a4
- SHA1 eafae3159d071dfe6b696cc3e97976859d9d373a
- SHA512 934646fd0b97fa60f9c93eab572ffb37f0af7af7afae9cee78634743ccd1d81c436deeb7416ca3b8f57f345fd2d297019a3ecc3370f2e3c36020a002b078170f
- SSDEEP 12288:E3Sgbu4VOGWPSqt6IpouYgCEmx1z725uRG9OArjlI6YmLm08dOkx2LIaxy:IVOL4/gPnKHOkx2LFE
- TLSH T13B845C2AB6E0D076C4B79574C4A257A6FBB1B43227204ACF6390475A1F237E2BD3531E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory