General
- Target 2026-08-06_a94759f691c7e801df65fdf61769ed36_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop_swisyn_tofsee_wannacry
- Size 2.4MB
- Sample260807-aqa7hsdb55
- SHA256 2c5925096298e348395a9d87c9883b8c191f5a9802729a1c0b32f90b8461836a
- MD5 a94759f691c7e801df65fdf61769ed36
- SHA1 5af7479378134cdeb3ac692056571c2fec57ae54
- SHA512 99ad434cf93caf8cb50530f4f1fa119a51f250d56cfee2eb8e25dcccd9e458d0466bfbff16557ec9a55eea1e8911f1d3cd73dc400db4608495b8bd8abd5edc4b
- SSDEEP 24576:cFOaa7wae7+GH4xM9/0Oz+xKF2RWTIU0pHa6ozFnNyr9UEK2HDzA:smwae7IxM/6xKF+WTIR7GFM/K2HA
- TLSH T181C5D423CFB54865C0268F36C423665569331D98439A5A8F4BA4F43F5DF33826AA723F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-06_a94759f691c7e801df65fdf61769ed36_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop_swisyn_tofsee_wannacry.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-06_a94759f691c7e801df65fdf61769ed36_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop_swisyn_tofsee_wannacry.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-06_a94759f691c7e801df65fdf61769ed36_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop_swisyn_tofsee_wannacry
- Size 2.4MB
- SHA256 2c5925096298e348395a9d87c9883b8c191f5a9802729a1c0b32f90b8461836a
- MD5 a94759f691c7e801df65fdf61769ed36
- SHA1 5af7479378134cdeb3ac692056571c2fec57ae54
- SHA512 99ad434cf93caf8cb50530f4f1fa119a51f250d56cfee2eb8e25dcccd9e458d0466bfbff16557ec9a55eea1e8911f1d3cd73dc400db4608495b8bd8abd5edc4b
- SSDEEP 24576:cFOaa7wae7+GH4xM9/0Oz+xKF2RWTIU0pHa6ozFnNyr9UEK2HDzA:smwae7IxM/6xKF+WTIR7GFM/K2HA
- TLSH T181C5D423CFB54865C0268F36C423665569331D98439A5A8F4BA4F43F5DF33826AA723F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory