General
- Target 2026-07-23_9a316717c45b0b6b4aea283a46afc389_amadey_cloudeye_coinminer_elex_hellokitty_luca-stealer_njrat_remcos_rhadamanthys_rugmi_smoke-loader_vidar
- Size 3.9MB
- Sample260723-rwvlsael2v
- SHA256 c7892cdf9743f5404e692a78e264e4b4fb1b9112bf9262a013594849ffe8018c
- MD5 9a316717c45b0b6b4aea283a46afc389
- SHA1 e99b07bbdb8a18734cac6fc4a06cc639d49dd2b6
- SHA512 839e599a273028befe530d450d3725693760ef391bff79fcf1b70b81a8559a8d881fe12fdc199c0978322dfcbade7a4472383e159496e32abff0489b2e33d7f3
- SSDEEP 49152:xGT2K5mmfU4UjrQUbaMf/lLo51rBmmWOZO9SEmBCp2BDseKECCJPpDrbqcjo/xcR:22K5mmfUbwUb/h4tZNh7XExcaN0oq
- TLSH T1D016BF62B188C076E4158076A7787974D538B8AA57B118CFE7C07D242B36EC3AB3B357
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-23_9a316717c45b0b6b4aea283a46afc389_amadey_cloudeye_coinminer_elex_hellokitty_luca-stealer_n.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-23_9a316717c45b0b6b4aea283a46afc389_amadey_cloudeye_coinminer_elex_hellokitty_luca-stealer_njrat_remcos_rhadamanthys_rugmi_smoke-loader_vidar
- Size 3.9MB
- SHA256 c7892cdf9743f5404e692a78e264e4b4fb1b9112bf9262a013594849ffe8018c
- MD5 9a316717c45b0b6b4aea283a46afc389
- SHA1 e99b07bbdb8a18734cac6fc4a06cc639d49dd2b6
- SHA512 839e599a273028befe530d450d3725693760ef391bff79fcf1b70b81a8559a8d881fe12fdc199c0978322dfcbade7a4472383e159496e32abff0489b2e33d7f3
- SSDEEP 49152:xGT2K5mmfU4UjrQUbaMf/lLo51rBmmWOZO9SEmBCp2BDseKECCJPpDrbqcjo/xcR:22K5mmfUbwUb/h4tZNh7XExcaN0oq
- TLSH T1D016BF62B188C076E4158076A7787974D538B8AA57B118CFE7C07D242B36EC3AB3B357
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Shodi worm
-
Executes dropped EXE
-
Drops file in System32 directory