General
- Target 2026-08-03_5370d5726950bc5d40923b7261d15b27_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 395KB
- Sample260804-n432cadr3v
- SHA256 0e28bca6c139c28392f369a60991a89ea5aec551979669590ef33f9bd99c3aee
- MD5 5370d5726950bc5d40923b7261d15b27
- SHA1 78e99c5814510ae409cdad8a9fe25a714e24308c
- SHA512 a19d2f06c1b28661b173261a5662824006d0f1a68e9a9e94bc2e0949d03d42193b8d3d06249913d84e86ae30f3b72fcbccc6d4971f5252db5d8b4dd124ef5d21
- SSDEEP 12288:A3Sgbu4VOGWPSqt6IpouYgCEmx1z725uRG9OArjlI6YmLm08dOkx2LIaxy:kVOL4/gPnKHOkx2LFE
- TLSH T1E7845C2AB6E0D076C4B79574C4A257A6FBB1B43227204ACF6390475A1F237E2BD3531E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_5370d5726950bc5d40923b7261d15b27_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_5370d5726950bc5d40923b7261d15b27_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_5370d5726950bc5d40923b7261d15b27_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 395KB
- SHA256 0e28bca6c139c28392f369a60991a89ea5aec551979669590ef33f9bd99c3aee
- MD5 5370d5726950bc5d40923b7261d15b27
- SHA1 78e99c5814510ae409cdad8a9fe25a714e24308c
- SHA512 a19d2f06c1b28661b173261a5662824006d0f1a68e9a9e94bc2e0949d03d42193b8d3d06249913d84e86ae30f3b72fcbccc6d4971f5252db5d8b4dd124ef5d21
- SSDEEP 12288:A3Sgbu4VOGWPSqt6IpouYgCEmx1z725uRG9OArjlI6YmLm08dOkx2LIaxy:kVOL4/gPnKHOkx2LFE
- TLSH T1E7845C2AB6E0D076C4B79574C4A257A6FBB1B43227204ACF6390475A1F237E2BD3531E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory