General
- Target 2026-08-09_18028d8ec0a0d05c45bf7c60debfa7bd_amadey_coinminer_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 560KB
- Sample260809-1rbsjscf66
- SHA256 fa18cff4d528fddcab28374f24268f1aeb7821f80275069986b37534ccf54a6d
- MD5 18028d8ec0a0d05c45bf7c60debfa7bd
- SHA1 d062f88387e05526a9783b0d16832648f5924260
- SHA512 6e1f045dccfb50f4caa08a7d1ea85c43ddeb2ecbb5f097fa8b1a815a15a9f50d90bbd95244772149d429fa8ecf5d3c1706b92d556e598ffb394a0a1a17319d34
- SSDEEP 12288:X3Sgbu4VOGWPSqt6IpouYgCEmx1z725uRG9OArjlI6YeLm08XsOkx2LIa+y:lVOL4/gPXKCOkx2LFR
- TLSH T1C2C46D2AB6E0D076C4B79574C4A256A6FFB1B43127204ACF6390475A1F637E2BE3530E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-09_18028d8ec0a0d05c45bf7c60debfa7bd_amadey_coinminer_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_18028d8ec0a0d05c45bf7c60debfa7bd_amadey_coinminer_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 560KB
- SHA256 fa18cff4d528fddcab28374f24268f1aeb7821f80275069986b37534ccf54a6d
- MD5 18028d8ec0a0d05c45bf7c60debfa7bd
- SHA1 d062f88387e05526a9783b0d16832648f5924260
- SHA512 6e1f045dccfb50f4caa08a7d1ea85c43ddeb2ecbb5f097fa8b1a815a15a9f50d90bbd95244772149d429fa8ecf5d3c1706b92d556e598ffb394a0a1a17319d34
- SSDEEP 12288:X3Sgbu4VOGWPSqt6IpouYgCEmx1z725uRG9OArjlI6YeLm08XsOkx2LIa+y:lVOL4/gPXKCOkx2LFR
- TLSH T1C2C46D2AB6E0D076C4B79574C4A256A6FFB1B43127204ACF6390475A1F637E2BE3530E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory