General
- Target 2026-08-13_8a81503842510eb755f0b477d260452a_amadey_coinminer_cryptolocker_elex_graphican_rhadamanthys_smoke-loader_stop
- Size 743KB
- Sample260813-extdwszwcs
- SHA256 cba6c3f7d338af394708aae3ffc661fd1e1e73b6d917e5d4358dd63a5cc91e1e
- MD5 8a81503842510eb755f0b477d260452a
- SHA1 71cf68fd0b12e5ebd270581862b7a0e914d01c40
- SHA512 7731c3465ee2bb651c1610bf084ab857d47c4f93995cc38d5ae6a656c44f40f0d9f2223aeda23a02fb72e95cb07314ead74bd1b326e2254be1a3003a23984f21
- SSDEEP 12288:0SvO2x9mONvKRILSFnOkx2LIaxya5FAQjU/LikG8:HvO2xJKRI2FOkx2LFEvcU68
- TLSH T1E5F45A31E2418036D5B34576C6FA0BBFB5647D25131165CBA3C8BA262FB36D2BA3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-08-13_8a81503842510eb755f0b477d260452a_amadey_coinminer_cryptolocker_elex_graphican_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-13_8a81503842510eb755f0b477d260452a_amadey_coinminer_cryptolocker_elex_graphican_rhadamanthys_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-13_8a81503842510eb755f0b477d260452a_amadey_coinminer_cryptolocker_elex_graphican_rhadamanthys_smoke-loader_stop
- Size 743KB
- SHA256 cba6c3f7d338af394708aae3ffc661fd1e1e73b6d917e5d4358dd63a5cc91e1e
- MD5 8a81503842510eb755f0b477d260452a
- SHA1 71cf68fd0b12e5ebd270581862b7a0e914d01c40
- SHA512 7731c3465ee2bb651c1610bf084ab857d47c4f93995cc38d5ae6a656c44f40f0d9f2223aeda23a02fb72e95cb07314ead74bd1b326e2254be1a3003a23984f21
- SSDEEP 12288:0SvO2x9mONvKRILSFnOkx2LIaxya5FAQjU/LikG8:HvO2xJKRI2FOkx2LFEvcU68
- TLSH T1E5F45A31E2418036D5B34576C6FA0BBFB5647D25131165CBA3C8BA262FB36D2BA3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory