General
- Target 2026-04-24_cf39fd12e07e10535aee1cd0a829bbed_amadey_coinminer_elex_redline-stealer_rhadamanthys_sivis_smoke-loader_stealc_stop
- Size 4.7MB
- Sample260424-rexptacy9w
- SHA256 8ff80945de56e783e980ec5fbd2c813e7ecc0ba2a826b698ce4ff5130ccae74f
- MD5 cf39fd12e07e10535aee1cd0a829bbed
- SHA1 5caafdfe5b254f1c8ad127a8f3782086286f6200
- SHA512 91fe7f5a347839f75a8d6226c833c3f5ee6b1d25d8180645f1c126eecc0ae6a945270f625b44e738a3342c7f9cbd8435a97dda485e62189a2a3c14b963d75402
- SSDEEP 98304:Tbb+stJoOHDDUZt9LDkW6jtf1SCpynsSPwxY5Gz6y4ZH:ZvoOjoNHkpF1SCwnkx7m7t
- TLSH T1963602136BE51011E9B20B79A43DD0207D377DC45A388C6E625C7D5E9BB3B828AB3787
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-04-24_cf39fd12e07e10535aee1cd0a829bbed_amadey_coinminer_elex_redline-stealer_rhadamanthys_sivis.exe
Resource
win10v2004-20260130-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-24_cf39fd12e07e10535aee1cd0a829bbed_amadey_coinminer_elex_redline-stealer_rhadamanthys_sivis_smoke-loader_stealc_stop
- Size 4.7MB
- SHA256 8ff80945de56e783e980ec5fbd2c813e7ecc0ba2a826b698ce4ff5130ccae74f
- MD5 cf39fd12e07e10535aee1cd0a829bbed
- SHA1 5caafdfe5b254f1c8ad127a8f3782086286f6200
- SHA512 91fe7f5a347839f75a8d6226c833c3f5ee6b1d25d8180645f1c126eecc0ae6a945270f625b44e738a3342c7f9cbd8435a97dda485e62189a2a3c14b963d75402
- SSDEEP 98304:Tbb+stJoOHDDUZt9LDkW6jtf1SCpynsSPwxY5Gz6y4ZH:ZvoOjoNHkpF1SCwnkx7m7t
- TLSH T1963602136BE51011E9B20B79A43DD0207D377DC45A388C6E625C7D5E9BB3B828AB3787
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Drops desktop.ini file(s)