General
- Target 2026-08-14_4fe10dd5b71edf8728682a1a6a4211ed_amadey_coinminer_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 560KB
- Sample260814-b5na3astfv
- SHA256 1db772bb746fd8a3472df363dfe58eb6dc7436649158a65a51f7c2a9436895ac
- MD5 4fe10dd5b71edf8728682a1a6a4211ed
- SHA1 97cf239135ac2dfda924ef97fd605acc7dd2c091
- SHA512 099b2bbc4b189126568ce1968588787cd13d52844582bb092da4a7280ca155e409e41b53cb72cf07b1115c8bd4bbe4841ab90f2e212ae272184d4b7ca55695be
- SSDEEP 12288:u3Sgbu4VOGWPSqt6IpouYgCEmx1z725uRG9OArjlI6YeLm08XsOkx2LIa+y:eVOL4/gPXKCOkx2LFR
- TLSH T147C46D2AB6E0D076C4B79574C4A256A6FFB1B43127204ACF6390475A1F637E2BE3530E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-14_4fe10dd5b71edf8728682a1a6a4211ed_amadey_coinminer_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-14_4fe10dd5b71edf8728682a1a6a4211ed_amadey_coinminer_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-14_4fe10dd5b71edf8728682a1a6a4211ed_amadey_coinminer_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 560KB
- SHA256 1db772bb746fd8a3472df363dfe58eb6dc7436649158a65a51f7c2a9436895ac
- MD5 4fe10dd5b71edf8728682a1a6a4211ed
- SHA1 97cf239135ac2dfda924ef97fd605acc7dd2c091
- SHA512 099b2bbc4b189126568ce1968588787cd13d52844582bb092da4a7280ca155e409e41b53cb72cf07b1115c8bd4bbe4841ab90f2e212ae272184d4b7ca55695be
- SSDEEP 12288:u3Sgbu4VOGWPSqt6IpouYgCEmx1z725uRG9OArjlI6YeLm08XsOkx2LIa+y:eVOL4/gPXKCOkx2LFR
- TLSH T147C46D2AB6E0D076C4B79574C4A256A6FFB1B43127204ACF6390475A1F637E2BE3530E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory