General
- Target 2026-07-15_861b4757f64c15256176f10899021581_amadey_coinminer_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 560KB
- Sample260715-qef7dsc17n
- SHA256 856dd6a86f2e9907d998cde565e225aea24a785a2b27cb3d8f0ea33af93b7ca4
- MD5 861b4757f64c15256176f10899021581
- SHA1 e62364c86e052c7e2eeee9afb543236a4778bf69
- SHA512 18bd1386ccdffdda1072373506d5cf05772743b4b2d6f22fa8eb2e1fc0df896ed0b5f9c53ec7522d412d6c65c578b8fe9d5a913c1e42ffe5b2f7a626279e12e3
- SSDEEP 12288:B3Sgbu4VOGWPSqt6IpouYgCEmx1z725uRG9OArjlI6YeLm08XsOkx2LIa+y:zVOL4/gPXKCOkx2LFR
- TLSH T114C46D2AB6E0D076C4B79574C4A256A6FFB1B43127204ACF6390475A1F637E2BE3530E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-15_861b4757f64c15256176f10899021581_amadey_coinminer_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-15_861b4757f64c15256176f10899021581_amadey_coinminer_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-15_861b4757f64c15256176f10899021581_amadey_coinminer_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 560KB
- SHA256 856dd6a86f2e9907d998cde565e225aea24a785a2b27cb3d8f0ea33af93b7ca4
- MD5 861b4757f64c15256176f10899021581
- SHA1 e62364c86e052c7e2eeee9afb543236a4778bf69
- SHA512 18bd1386ccdffdda1072373506d5cf05772743b4b2d6f22fa8eb2e1fc0df896ed0b5f9c53ec7522d412d6c65c578b8fe9d5a913c1e42ffe5b2f7a626279e12e3
- SSDEEP 12288:B3Sgbu4VOGWPSqt6IpouYgCEmx1z725uRG9OArjlI6YeLm08XsOkx2LIa+y:zVOL4/gPXKCOkx2LFR
- TLSH T114C46D2AB6E0D076C4B79574C4A256A6FFB1B43127204ACF6390475A1F637E2BE3530E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory