General
- Target 2026-08-12_41aa1f6b98e7fbe6d525def5af9dde38_amadey_coinminer_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 560KB
- Sample260812-qe17kavybs
- SHA256 716ac3a0f49ab3558008b81ff6d872eafd33efa17872a647852a7a7b534c4c5c
- MD5 41aa1f6b98e7fbe6d525def5af9dde38
- SHA1 4de9fe0e416936c6a86c5bb6d1bb415c8f8f4e05
- SHA512 197ce1f958399cb02a175cbf37575c5bfbba78c50085daaee595857a61208c5c5d536a57a1acccc70dd5bc8de2c911c6365f687cee44d539ced6ea93049dcd4e
- SSDEEP 12288:K3Sgbu4VOGWPSqt6IpouYgCEmx1z725uRG9OArjlI6YeLm08XsOkx2LIa+y:qVOL4/gPXKCOkx2LFR
- TLSH T19CC46D2AB6E0D076C4B79574C4A256A6FFB1B43127204ACF6390475A1F637E2BE3530E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-12_41aa1f6b98e7fbe6d525def5af9dde38_amadey_coinminer_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-12_41aa1f6b98e7fbe6d525def5af9dde38_amadey_coinminer_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-12_41aa1f6b98e7fbe6d525def5af9dde38_amadey_coinminer_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 560KB
- SHA256 716ac3a0f49ab3558008b81ff6d872eafd33efa17872a647852a7a7b534c4c5c
- MD5 41aa1f6b98e7fbe6d525def5af9dde38
- SHA1 4de9fe0e416936c6a86c5bb6d1bb415c8f8f4e05
- SHA512 197ce1f958399cb02a175cbf37575c5bfbba78c50085daaee595857a61208c5c5d536a57a1acccc70dd5bc8de2c911c6365f687cee44d539ced6ea93049dcd4e
- SSDEEP 12288:K3Sgbu4VOGWPSqt6IpouYgCEmx1z725uRG9OArjlI6YeLm08XsOkx2LIa+y:qVOL4/gPXKCOkx2LFR
- TLSH T19CC46D2AB6E0D076C4B79574C4A256A6FFB1B43127204ACF6390475A1F637E2BE3530E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory