General
- Target 2026-04-24_2ce26ebe1084130b5f9d235295e9e697_amadey_coinminer_elex_redline-stealer_rhadamanthys_sivis_smoke-loader_stealc_stop
- Size 4.4MB
- Sample260424-prphvsaw3q
- SHA256 4cbedc3b3a5eb23eab0d7cda57bea92d1726f0869616d2937a3b907122315efe
- MD5 2ce26ebe1084130b5f9d235295e9e697
- SHA1 807e458b622ad79ea49937287dd6118c95496fd0
- SHA512 92dc0b1173b6bb6e6ddff12cf924d7dc69a926513dad7cd2327979062f77c7aaa1a4360eb78ba8c2e9d652dcf6c1bc93b5a74b1ce2184d952d5b3b0aa96826c7
- SSDEEP 98304:fstJoOHDDUZt9LDkW6jtf1SCpynsSPwxY5Gz6y4ZH:0voOjoNHkpF1SCwnkx7m7t
- TLSH T1CB2623227B602162C9F607B6E13CE120B9349DC59B184C5EF719BF2E5A743819BF724B
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-04-24_2ce26ebe1084130b5f9d235295e9e697_amadey_coinminer_elex_redline-stealer_rhadamanthys_sivis.exe
Resource
win10v2004-20260130-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-24_2ce26ebe1084130b5f9d235295e9e697_amadey_coinminer_elex_redline-stealer_rhadamanthys_sivis_smoke-loader_stealc_stop
- Size 4.4MB
- SHA256 4cbedc3b3a5eb23eab0d7cda57bea92d1726f0869616d2937a3b907122315efe
- MD5 2ce26ebe1084130b5f9d235295e9e697
- SHA1 807e458b622ad79ea49937287dd6118c95496fd0
- SHA512 92dc0b1173b6bb6e6ddff12cf924d7dc69a926513dad7cd2327979062f77c7aaa1a4360eb78ba8c2e9d652dcf6c1bc93b5a74b1ce2184d952d5b3b0aa96826c7
- SSDEEP 98304:fstJoOHDDUZt9LDkW6jtf1SCpynsSPwxY5Gz6y4ZH:0voOjoNHkpF1SCwnkx7m7t
- TLSH T1CB2623227B602162C9F607B6E13CE120B9349DC59B184C5EF719BF2E5A743819BF724B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Drops desktop.ini file(s)