General
- Target 2026-08-18_03784d900a95d505eba23ab54789d094_amadey_coinminer_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 560KB
- Sample260818-c36v3avxfx
- SHA256 8f0e05817b7a02a8468a085e6a3cb7a46dcd49a27f425bb1481edeb4225f9fd9
- MD5 03784d900a95d505eba23ab54789d094
- SHA1 e4f7a8a4a38ed8430e2a592aa7c5c38f1f8e1117
- SHA512 0dd7bd954ed5d7c129b95dda6c3e8e1c3ddee634d335d3678c10f26b7cd99cc325a48ed2920c64bfc91edff43247e67b924a66d18a8c8a5e63733f267462884d
- SSDEEP 12288:W3Sgbu4VOGWPSqt6IpouYgCEmx1z725uRG9OArjlI6YeLm08XsOkx2LIa+y:WVOL4/gPXKCOkx2LFR
- TLSH T1F8C46D2AB6E0D076C4B79574C4A256A6FFB1B43127204ACF6390475A1F637E2BE3530E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-18_03784d900a95d505eba23ab54789d094_amadey_coinminer_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-18_03784d900a95d505eba23ab54789d094_amadey_coinminer_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 560KB
- SHA256 8f0e05817b7a02a8468a085e6a3cb7a46dcd49a27f425bb1481edeb4225f9fd9
- MD5 03784d900a95d505eba23ab54789d094
- SHA1 e4f7a8a4a38ed8430e2a592aa7c5c38f1f8e1117
- SHA512 0dd7bd954ed5d7c129b95dda6c3e8e1c3ddee634d335d3678c10f26b7cd99cc325a48ed2920c64bfc91edff43247e67b924a66d18a8c8a5e63733f267462884d
- SSDEEP 12288:W3Sgbu4VOGWPSqt6IpouYgCEmx1z725uRG9OArjlI6YeLm08XsOkx2LIa+y:WVOL4/gPXKCOkx2LFR
- TLSH T1F8C46D2AB6E0D076C4B79574C4A256A6FFB1B43127204ACF6390475A1F637E2BE3530E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory