General
- Target 2026-08-08_3814da7683932e35c9e467158933e406_amadey_coinminer_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 560KB
- Sample260808-hccr7abj4t
- SHA256 7b38ec1c7883cd9b4e90ef38a82bebf55062998614d4a746da0fb467bc28133e
- MD5 3814da7683932e35c9e467158933e406
- SHA1 643d92529d2f1b9e744d9de4080a39c6a4a1adf9
- SHA512 d185a0d3185b04af601c370f437133fb5e5b404680abd051f17b04b6851fa63616776a3236927354401f8d6623a30f911fc75eef293a4ed4d3fe4acba204eb16
- SSDEEP 12288:l3Sgbu4VOGWPSqt6IpouYgCEmx1z725uRG9OArjlI6YeLm08XsOkx2LIa+y:3VOL4/gPXKCOkx2LFR
- TLSH T1CBC46D2AB6E0D076C4B79574C4A256A6FFB1B43127204ACF6390475A1F637E2BE3530E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-08_3814da7683932e35c9e467158933e406_amadey_coinminer_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_3814da7683932e35c9e467158933e406_amadey_coinminer_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 560KB
- SHA256 7b38ec1c7883cd9b4e90ef38a82bebf55062998614d4a746da0fb467bc28133e
- MD5 3814da7683932e35c9e467158933e406
- SHA1 643d92529d2f1b9e744d9de4080a39c6a4a1adf9
- SHA512 d185a0d3185b04af601c370f437133fb5e5b404680abd051f17b04b6851fa63616776a3236927354401f8d6623a30f911fc75eef293a4ed4d3fe4acba204eb16
- SSDEEP 12288:l3Sgbu4VOGWPSqt6IpouYgCEmx1z725uRG9OArjlI6YeLm08XsOkx2LIa+y:3VOL4/gPXKCOkx2LFR
- TLSH T1CBC46D2AB6E0D076C4B79574C4A256A6FFB1B43127204ACF6390475A1F637E2BE3530E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory