General
- Target 2026-08-03_87c227574debacd7aa8a06a32d7d6e2c_amadey_coinminer_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 560KB
- Sample260804-m3r21stygz
- SHA256 7e36b317c991c36818fc1ab515a3ea6e07b885d27e8ae5c897266517566e0ec6
- MD5 87c227574debacd7aa8a06a32d7d6e2c
- SHA1 b8801b331cd252a718bffe60e8698f9a5906bced
- SHA512 03b968e1cd46f3c17f36f2880e6b04cd19d1f065631f6a5fb5dad5e1921ec2270b3fcef3b5ded96f8ee84c0b2a0e26db34ad05cfc0b869ad18334af7a60070e5
- SSDEEP 12288:y3Sgbu4VOGWPSqt6IpouYgCEmx1z725uRG9OArjlI6YeLm08XsOkx2LIa+y:CVOL4/gPXKCOkx2LFR
- TLSH T1E0C46D2AB6E0D076C4B79574C4A256A6FFB1B43127204ACF6390475A1F637E2BE3530E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-03_87c227574debacd7aa8a06a32d7d6e2c_amadey_coinminer_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_87c227574debacd7aa8a06a32d7d6e2c_amadey_coinminer_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 560KB
- SHA256 7e36b317c991c36818fc1ab515a3ea6e07b885d27e8ae5c897266517566e0ec6
- MD5 87c227574debacd7aa8a06a32d7d6e2c
- SHA1 b8801b331cd252a718bffe60e8698f9a5906bced
- SHA512 03b968e1cd46f3c17f36f2880e6b04cd19d1f065631f6a5fb5dad5e1921ec2270b3fcef3b5ded96f8ee84c0b2a0e26db34ad05cfc0b869ad18334af7a60070e5
- SSDEEP 12288:y3Sgbu4VOGWPSqt6IpouYgCEmx1z725uRG9OArjlI6YeLm08XsOkx2LIa+y:CVOL4/gPXKCOkx2LFR
- TLSH T1E0C46D2AB6E0D076C4B79574C4A256A6FFB1B43127204ACF6390475A1F637E2BE3530E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory