General
- Target 2026-08-19_ec56835be399e335334f5e652721eb66_amadey_coinminer_darpapox_elex_jaku_nymaim_rhadamanthys_smoke-loader_stealc_wannacry
- Size 1.9MB
- Sample260819-vhkffa1vay
- SHA256 841dd763fb4c1966d826ca635e93c3fef552ea0eae29821394336ffd4e3fbf00
- MD5 ec56835be399e335334f5e652721eb66
- SHA1 b093be174e5f6b3de2095801f20d1a0d61e21dfe
- SHA512 0ba5870b6f4171cd2a5d14b328bd1991cfffc70cba75f82d93dce95da65bfb2940ed0b20c1bda56ef5b8950b4e68b56bec7b5285ab89469fe48e9404dfe7e7ae
- SSDEEP 24576:1bb6rXdVtTj2i64T+jdxQCfgOFD3WSwd2QtBBw6xxhVxQtmibjOhZaiRu/4oMaoF:1X6RbTChxKCnFnQXBbrtgb/iQvu0UHOM
- TLSH T1DC95DE1123A4DD21F3BFE63297E45E717977B9213B32C90A5A0411391BF1E9ADBE0362
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-19_ec56835be399e335334f5e652721eb66_amadey_coinminer_darpapox_elex_jaku_nymaim_rhadamanthys_.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-19_ec56835be399e335334f5e652721eb66_amadey_coinminer_darpapox_elex_jaku_nymaim_rhadamanthys_.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-19_ec56835be399e335334f5e652721eb66_amadey_coinminer_darpapox_elex_jaku_nymaim_rhadamanthys_smoke-loader_stealc_wannacry
- Size 1.9MB
- SHA256 841dd763fb4c1966d826ca635e93c3fef552ea0eae29821394336ffd4e3fbf00
- MD5 ec56835be399e335334f5e652721eb66
- SHA1 b093be174e5f6b3de2095801f20d1a0d61e21dfe
- SHA512 0ba5870b6f4171cd2a5d14b328bd1991cfffc70cba75f82d93dce95da65bfb2940ed0b20c1bda56ef5b8950b4e68b56bec7b5285ab89469fe48e9404dfe7e7ae
- SSDEEP 24576:1bb6rXdVtTj2i64T+jdxQCfgOFD3WSwd2QtBBw6xxhVxQtmibjOhZaiRu/4oMaoF:1X6RbTChxKCnFnQXBbrtgb/iQvu0UHOM
- TLSH T1DC95DE1123A4DD21F3BFE63297E45E717977B9213B32C90A5A0411391BF1E9ADBE0362
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Drops file in System32 directory