General
- Target 2026-06-02_f5b9b15f387bb5f98a8752f3bca71e9e_amadey_coinminer_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 560KB
- Sample260602-dfvd7adx3m
- SHA256 323bda73436781d0af7968f4bbd6b4416a81ccd805bd4d766bbe60cb6d30efec
- MD5 f5b9b15f387bb5f98a8752f3bca71e9e
- SHA1 eec7a01c35a842502dfee656de2fe7df9f849003
- SHA512 8152a028a1f994f3a2e8eb2ec89aeb5c5a510ac2fde5a038ca548b40484872495c55907307bbf6798e71b99e9ff538e401d4270d98c53955abb060dfbbfcacd7
- SSDEEP 12288:m3Sgbu4VOGWPSqt6IpouYgCEmx1z725uRG9OArjlI6YeLm08XsOkx2LIa+y:mVOL4/gPXKCOkx2LFR
- TLSH T148C46D2AB6E0D076C4B79574C4A256A6FFB1B43127204ACF6390475A1F637E2BE3530E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-06-02_f5b9b15f387bb5f98a8752f3bca71e9e_amadey_coinminer_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-02_f5b9b15f387bb5f98a8752f3bca71e9e_amadey_coinminer_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win11-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-02_f5b9b15f387bb5f98a8752f3bca71e9e_amadey_coinminer_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 560KB
- SHA256 323bda73436781d0af7968f4bbd6b4416a81ccd805bd4d766bbe60cb6d30efec
- MD5 f5b9b15f387bb5f98a8752f3bca71e9e
- SHA1 eec7a01c35a842502dfee656de2fe7df9f849003
- SHA512 8152a028a1f994f3a2e8eb2ec89aeb5c5a510ac2fde5a038ca548b40484872495c55907307bbf6798e71b99e9ff538e401d4270d98c53955abb060dfbbfcacd7
- SSDEEP 12288:m3Sgbu4VOGWPSqt6IpouYgCEmx1z725uRG9OArjlI6YeLm08XsOkx2LIa+y:mVOL4/gPXKCOkx2LFR
- TLSH T148C46D2AB6E0D076C4B79574C4A256A6FFB1B43127204ACF6390475A1F637E2BE3530E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10- Custom signature
UPX dump on OEP (original entry point)
Executes dropped EXE
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
Drops file in System32 directory