General
- Target 2026-08-10_fa189b180d263edea9dc0b744f2f9617_amadey_coinminer_elex_jaku_nymaim_redline-stealer_rhadamanthys_smoke-loader_stop_wannacry
- Size 1.0MB
- Sample260810-lbxbzsem3s
- SHA256 a0339684e954ef4990a7857aafc4ed8eb050ac925e970dda20764e226dec0382
- MD5 fa189b180d263edea9dc0b744f2f9617
- SHA1 f742e5554c09d895ae0966dcb01bcd836926d019
- SHA512 219b063365b69a078538603de4251d724ea0ceb64705fb626c1cd6351e01f89ffbccc510471fe60ddc2bd3174cef3f53a74f95b7838ada5fa45008b270c3064d
- SSDEEP 24576:7wGRzatThRiVNbLGJv6plFh9iGa2oMYMgdsHGew:7N8TjFJspDLoVMgdkLw
- TLSH T1E435F1197780CCB1F25FC07246D0AF34B6772A212772C98B2F4895391FF1A5EE7A2256
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-10_fa189b180d263edea9dc0b744f2f9617_amadey_coinminer_elex_jaku_nymaim_redline-stealer_rhadam.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-10_fa189b180d263edea9dc0b744f2f9617_amadey_coinminer_elex_jaku_nymaim_redline-stealer_rhadam.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-10_fa189b180d263edea9dc0b744f2f9617_amadey_coinminer_elex_jaku_nymaim_redline-stealer_rhadamanthys_smoke-loader_stop_wannacry
- Size 1.0MB
- SHA256 a0339684e954ef4990a7857aafc4ed8eb050ac925e970dda20764e226dec0382
- MD5 fa189b180d263edea9dc0b744f2f9617
- SHA1 f742e5554c09d895ae0966dcb01bcd836926d019
- SHA512 219b063365b69a078538603de4251d724ea0ceb64705fb626c1cd6351e01f89ffbccc510471fe60ddc2bd3174cef3f53a74f95b7838ada5fa45008b270c3064d
- SSDEEP 24576:7wGRzatThRiVNbLGJv6plFh9iGa2oMYMgdsHGew:7N8TjFJspDLoVMgdkLw
- TLSH T1E435F1197780CCB1F25FC07246D0AF34B6772A212772C98B2F4895391FF1A5EE7A2256
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application