General
- Target 2026-07-23_22268d9a6c548f1e62b68e8ea91f1da7_amadey_coinminer_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 560KB
- Sample260723-vh1gnatarc
- SHA256 a1cf5e57fce9295e89c88a98616e8b98d263381ac915236edebe0ff912ec9c28
- MD5 22268d9a6c548f1e62b68e8ea91f1da7
- SHA1 662e9c90d068a949655cdfe62d5025f7847ed06f
- SHA512 02cf3c66e91207883e55a85d3098641f97d54e5280ee64487de6525fdbf8d4f346605a383913e4ac193473a1be6472f9053d6bcde7d65874c17204817e8a51a8
- SSDEEP 12288:R3Sgbu4VOGWPSqt6IpouYgCEmx1z725uRG9OArjlI6YeLm08XsOkx2LIa+y:DVOL4/gPXKCOkx2LFR
- TLSH T1CFC46D2AB6E0D076C4B79574C4A256A6FFB1B43127204ACF6390475A1F637E2BE3530E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-23_22268d9a6c548f1e62b68e8ea91f1da7_amadey_coinminer_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-23_22268d9a6c548f1e62b68e8ea91f1da7_amadey_coinminer_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-23_22268d9a6c548f1e62b68e8ea91f1da7_amadey_coinminer_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 560KB
- SHA256 a1cf5e57fce9295e89c88a98616e8b98d263381ac915236edebe0ff912ec9c28
- MD5 22268d9a6c548f1e62b68e8ea91f1da7
- SHA1 662e9c90d068a949655cdfe62d5025f7847ed06f
- SHA512 02cf3c66e91207883e55a85d3098641f97d54e5280ee64487de6525fdbf8d4f346605a383913e4ac193473a1be6472f9053d6bcde7d65874c17204817e8a51a8
- SSDEEP 12288:R3Sgbu4VOGWPSqt6IpouYgCEmx1z725uRG9OArjlI6YeLm08XsOkx2LIa+y:DVOL4/gPXKCOkx2LFR
- TLSH T1CFC46D2AB6E0D076C4B79574C4A256A6FFB1B43127204ACF6390475A1F637E2BE3530E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10- Custom signature
UPX dump on OEP (original entry point)
Executes dropped EXE
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
Drops file in System32 directory