General
- Target 2026-08-15_24dd44c31be80e457e55a2c37635a1c7_amadey_coinminer_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 560KB
- Sample260816-dfenqscj8y
- SHA256 4508644929bdf18191d5546fb6bab2b0ea782875091a356de29917d43ca6b52c
- MD5 24dd44c31be80e457e55a2c37635a1c7
- SHA1 025862b5459088d86180547c4d4e250c9db257e2
- SHA512 3820eb2af839bf29be05ac936c0346bbd78245d336a6274ccb2e02e747363f2f292b12d19a204e788e1da1e9a65e57cbe7e253df69f4fad11a77cb2d661e674d
- SSDEEP 12288:o3Sgbu4VOGWPSqt6IpouYgCEmx1z725uRG9OArjlI6YeLm08XsOkx2LIa+y:cVOL4/gPXKCOkx2LFR
- TLSH T187C46D2AB6E0D076C4B79574C4A256A6FFB1B43127204ACF6390475A1F637E2BE3530E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-15_24dd44c31be80e457e55a2c37635a1c7_amadey_coinminer_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-15_24dd44c31be80e457e55a2c37635a1c7_amadey_coinminer_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 560KB
- SHA256 4508644929bdf18191d5546fb6bab2b0ea782875091a356de29917d43ca6b52c
- MD5 24dd44c31be80e457e55a2c37635a1c7
- SHA1 025862b5459088d86180547c4d4e250c9db257e2
- SHA512 3820eb2af839bf29be05ac936c0346bbd78245d336a6274ccb2e02e747363f2f292b12d19a204e788e1da1e9a65e57cbe7e253df69f4fad11a77cb2d661e674d
- SSDEEP 12288:o3Sgbu4VOGWPSqt6IpouYgCEmx1z725uRG9OArjlI6YeLm08XsOkx2LIa+y:cVOL4/gPXKCOkx2LFR
- TLSH T187C46D2AB6E0D076C4B79574C4A256A6FFB1B43127204ACF6390475A1F637E2BE3530E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory