General
- Target 2026-08-25_bc9681badc389fb55a654df3997da54e_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 419KB
- Sample260826-nt22ascr6y
- SHA256 f0c26a1869ef47d5af1b55595138fae0267125b43e79bd5541608107f8a17752
- MD5 bc9681badc389fb55a654df3997da54e
- SHA1 608128a2cff94913b556c4c25f2f95355c9ea463
- SHA512 6aca423666d725bb7952986f554891ff29ba00a129b45a48857dc0787bfbfa75352d185cfe1d20722aa7674b9dc7446e6528a396d7c1edf674793cbf48c443e7
- SSDEEP 6144:R6DmGnV0H2LALrYcdwVDL+gqFCcEOkCybEaQRXr9HNdvOa:R6D/WiA3YcyVDLjOkx2LIa
- TLSH T170947C29BAE08073C5678576C4E257A6FBB1B52127108ACFA390475A1F237E3BD3531E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-25_bc9681badc389fb55a654df3997da54e_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-25_bc9681badc389fb55a654df3997da54e_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-25_bc9681badc389fb55a654df3997da54e_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 419KB
- SHA256 f0c26a1869ef47d5af1b55595138fae0267125b43e79bd5541608107f8a17752
- MD5 bc9681badc389fb55a654df3997da54e
- SHA1 608128a2cff94913b556c4c25f2f95355c9ea463
- SHA512 6aca423666d725bb7952986f554891ff29ba00a129b45a48857dc0787bfbfa75352d185cfe1d20722aa7674b9dc7446e6528a396d7c1edf674793cbf48c443e7
- SSDEEP 6144:R6DmGnV0H2LALrYcdwVDL+gqFCcEOkCybEaQRXr9HNdvOa:R6D/WiA3YcyVDLjOkx2LIa
- TLSH T170947C29BAE08073C5678576C4E257A6FBB1B52127108ACFA390475A1F237E3BD3531E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Executes dropped EXE
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
Drops file in System32 directory