General
- Target 2026-07-24_7036a5c3efbbb945f85e0eb242365f51_amadey_cloudeye_coinminer_elex_hellokitty_luca-stealer_njrat_remcos_rhadamanthys_rugmi_smoke-loader_vidar
- Size 4.7MB
- Sample260724-zplpasfk6z
- SHA256 442dcef315d6182a9b09fe390fccd92a6277aca2f58dd8038750d02660e7ee83
- MD5 7036a5c3efbbb945f85e0eb242365f51
- SHA1 818c6f6b780895edaf47f19d157bd1fcd54b8a66
- SHA512 e9ac4cba8e90fcba8eb8444851565a9c06bf61e785b20bd2ced79366367214b7cf02b537771e26a503209abfd50a0c13107cd3eb83c4a604b3b1803944f6b5fc
- SSDEEP 49152:xGT2K5mmfU4UjrQUbaMf/lLo51rBmmWOZO9SEmBCp2BDseKECCJPpDrbqcjo/xcZ:22K5mmfUbwUb/h4tZNh7XExcaN0ogtn
- TLSH T16336BF127188C0A6E4268076A7787535D534B4A6677158CFA7C0BD382F37ED2AB3E713
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-24_7036a5c3efbbb945f85e0eb242365f51_amadey_cloudeye_coinminer_elex_hellokitty_luca-stealer_n.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-24_7036a5c3efbbb945f85e0eb242365f51_amadey_cloudeye_coinminer_elex_hellokitty_luca-stealer_njrat_remcos_rhadamanthys_rugmi_smoke-loader_vidar
- Size 4.7MB
- SHA256 442dcef315d6182a9b09fe390fccd92a6277aca2f58dd8038750d02660e7ee83
- MD5 7036a5c3efbbb945f85e0eb242365f51
- SHA1 818c6f6b780895edaf47f19d157bd1fcd54b8a66
- SHA512 e9ac4cba8e90fcba8eb8444851565a9c06bf61e785b20bd2ced79366367214b7cf02b537771e26a503209abfd50a0c13107cd3eb83c4a604b3b1803944f6b5fc
- SSDEEP 49152:xGT2K5mmfU4UjrQUbaMf/lLo51rBmmWOZO9SEmBCp2BDseKECCJPpDrbqcjo/xcZ:22K5mmfUbwUb/h4tZNh7XExcaN0ogtn
- TLSH T16336BF127188C0A6E4268076A7787535D534B4A6677158CFA7C0BD382F37ED2AB3E713
- MD5 SHA1 SHA512 SSDEEP TLSH
Detects Shodi worm
Executes dropped EXE
Drops file in System32 directory