General
- Target 2026-08-08_0f36f660071bf81326bf478c4d280db5_amadey_coinminer_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 560KB
- Sample260809-apkdssga57
- SHA256 4f0b4c37abb6fac3e07e83b0f7b34b11f06cf11da5ecbd31c0b853016a5a828c
- MD5 0f36f660071bf81326bf478c4d280db5
- SHA1 a50c99f203ef99f4b7cc94f27156a379c5cd1eb7
- SHA512 2731f9a3cca325d44751cffe981d43fba7138f7d9d727cc9442ed475171e8272c974a719157fb8a3d736d3d0f0e5353170464dca6938dc93d82557d0e9bcd437
- SSDEEP 12288:m3Sgbu4VOGWPSqt6IpouYgCEmx1z725uRG9OArjlI6YeLm08XsOkx2LIa+y:mVOL4/gPXKCOkx2LFR
- TLSH T1DEC46D2AB6E0D076C4B79574C4A256A6FFB1B43127204ACF6390475A1F637E2BE3530E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-08_0f36f660071bf81326bf478c4d280db5_amadey_coinminer_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_0f36f660071bf81326bf478c4d280db5_amadey_coinminer_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 560KB
- SHA256 4f0b4c37abb6fac3e07e83b0f7b34b11f06cf11da5ecbd31c0b853016a5a828c
- MD5 0f36f660071bf81326bf478c4d280db5
- SHA1 a50c99f203ef99f4b7cc94f27156a379c5cd1eb7
- SHA512 2731f9a3cca325d44751cffe981d43fba7138f7d9d727cc9442ed475171e8272c974a719157fb8a3d736d3d0f0e5353170464dca6938dc93d82557d0e9bcd437
- SSDEEP 12288:m3Sgbu4VOGWPSqt6IpouYgCEmx1z725uRG9OArjlI6YeLm08XsOkx2LIa+y:mVOL4/gPXKCOkx2LFR
- TLSH T1DEC46D2AB6E0D076C4B79574C4A256A6FFB1B43127204ACF6390475A1F637E2BE3530E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory