General
- Target 2026-08-11_0e7a45c1d3225b81d3295e908d1df5df_amadey_coinminer_elex_luca-stealer_njrat_nymaim_remcos_rhadamanthys_rugmi_smoke-loader
- Size 845KB
- Sample260811-gm5qaaxdlf
- SHA256 f507e269ada0b4eaf6483de351637b23d98b38c06946db4ae5c14dbd15e137d4
- MD5 0e7a45c1d3225b81d3295e908d1df5df
- SHA1 084297ab29bcceb2f6dbf97b9ed3d5102fc0911b
- SHA512 d2c474532af6a1d8eac8837a2f9d51e253dbee19b689b1fb709248c3cd9b969b6af6f71c3419f17711cf8bda6d92c06a45ce8618fc5ab9d2900983837da59de0
- SSDEEP 24576:3lG/O5mWpI2jFM5sFzfTpiTLbo8NON56hlP:3lH5BjBbTpiXbo8NONaP
- TLSH T1F9059E31F552823EF6F101BBA8AC99B03D3DA324171085A7EBD4F91E2E705955FBB212
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-11_0e7a45c1d3225b81d3295e908d1df5df_amadey_coinminer_elex_luca-stealer_njrat_nymaim_remcos_r.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-11_0e7a45c1d3225b81d3295e908d1df5df_amadey_coinminer_elex_luca-stealer_njrat_nymaim_remcos_rhadamanthys_rugmi_smoke-loader
- Size 845KB
- SHA256 f507e269ada0b4eaf6483de351637b23d98b38c06946db4ae5c14dbd15e137d4
- MD5 0e7a45c1d3225b81d3295e908d1df5df
- SHA1 084297ab29bcceb2f6dbf97b9ed3d5102fc0911b
- SHA512 d2c474532af6a1d8eac8837a2f9d51e253dbee19b689b1fb709248c3cd9b969b6af6f71c3419f17711cf8bda6d92c06a45ce8618fc5ab9d2900983837da59de0
- SSDEEP 24576:3lG/O5mWpI2jFM5sFzfTpiTLbo8NON56hlP:3lH5BjBbTpiXbo8NONaP
- TLSH T1F9059E31F552823EF6F101BBA8AC99B03D3DA324171085A7EBD4F91E2E705955FBB212
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory