General
- Target 2026-05-29_9304389201915542b91128c90155eba1_amadey_coinminer_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 560KB
- Sample260529-pgntkscs7j
- SHA256 9322c664ae1af1cd0bf9e0ff126dccad13c8553b418b00f8aedc92248eee36fd
- MD5 9304389201915542b91128c90155eba1
- SHA1 80ce25285650ae456b475632b0406857c7ff6d09
- SHA512 cee1f5c506eac1bc6a3d4140b3975be4784500c0a498f18576173a00f3f6f588368c4c1ef21401986104e7d8f5bd882b0a9b6683f0ec66f608048a1afea0e5dd
- SSDEEP 12288:q3Sgbu4VOGWPSqt6IpouYgCEmx1z725uRG9OArjlI6YeLm08XsOkx2LIa+y:KVOL4/gPXKCOkx2LFR
- TLSH T103C46D2AB6E0D076C4B79574C4A256A6FFB1B43127204ACF6390475A1F637E2BE3530E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-05-29_9304389201915542b91128c90155eba1_amadey_coinminer_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-29_9304389201915542b91128c90155eba1_amadey_coinminer_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 560KB
- SHA256 9322c664ae1af1cd0bf9e0ff126dccad13c8553b418b00f8aedc92248eee36fd
- MD5 9304389201915542b91128c90155eba1
- SHA1 80ce25285650ae456b475632b0406857c7ff6d09
- SHA512 cee1f5c506eac1bc6a3d4140b3975be4784500c0a498f18576173a00f3f6f588368c4c1ef21401986104e7d8f5bd882b0a9b6683f0ec66f608048a1afea0e5dd
- SSDEEP 12288:q3Sgbu4VOGWPSqt6IpouYgCEmx1z725uRG9OArjlI6YeLm08XsOkx2LIa+y:KVOL4/gPXKCOkx2LFR
- TLSH T103C46D2AB6E0D076C4B79574C4A256A6FFB1B43127204ACF6390475A1F637E2BE3530E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory