General
- Target 2026-08-20_f9ffeb8e88cefdab86ee85313668552f_amadey_coinminer_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 560KB
- Sample260820-ex6dfssvcx
- SHA256 1ad81b902b8450f25247965a6cffc0995b8d45688d1e8a7347e7668b0f0d9be3
- MD5 f9ffeb8e88cefdab86ee85313668552f
- SHA1 78bde08098ebca63cef1f7f39f1454257e21a5a8
- SHA512 b9605bdb9ca9c913c869e7179a9c640d619a9709d58be065b6fb6dde8e14ae302874fad805056089d5d1b51599a3b74285100c2e92bc0a882f789358aed895ea
- SSDEEP 12288:Q3Sgbu4VOGWPSqt6IpouYgCEmx1z725uRG9OArjlI6YeLm08XsOkx2LIa+y:0VOL4/gPXKCOkx2LFR
- TLSH T169C46D2AB6E0D076C4B79574C4A256A6FFB1B43127204ACF6390475A1F637E2BE3530E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-20_f9ffeb8e88cefdab86ee85313668552f_amadey_coinminer_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_f9ffeb8e88cefdab86ee85313668552f_amadey_coinminer_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 560KB
- SHA256 1ad81b902b8450f25247965a6cffc0995b8d45688d1e8a7347e7668b0f0d9be3
- MD5 f9ffeb8e88cefdab86ee85313668552f
- SHA1 78bde08098ebca63cef1f7f39f1454257e21a5a8
- SHA512 b9605bdb9ca9c913c869e7179a9c640d619a9709d58be065b6fb6dde8e14ae302874fad805056089d5d1b51599a3b74285100c2e92bc0a882f789358aed895ea
- SSDEEP 12288:Q3Sgbu4VOGWPSqt6IpouYgCEmx1z725uRG9OArjlI6YeLm08XsOkx2LIa+y:0VOL4/gPXKCOkx2LFR
- TLSH T169C46D2AB6E0D076C4B79574C4A256A6FFB1B43127204ACF6390475A1F637E2BE3530E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory