General
- Target 2026-08-28_f75dedcfa905d440d207002f238fe6b6_amadey_coinminer_cryptolocker_elex_graphican_mafia_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 1.3MB
- Sample260828-glr3sstdjh
- SHA256 b05e446efaa956aa08a8693bd532797b34ecd8276d17d07c8b37c70413c569e1
- MD5 f75dedcfa905d440d207002f238fe6b6
- SHA1 d9906c2fb1d70346fc1e271a05ce14b9a9298b50
- SHA512 226f3398281ab0581083a1a3d0b5c47451ba2fb0ba0e081190c3dba25df521aaeb78f3a210f7c2bb886c7f5adefd1b5ec9b7eb17d93eec9193d31f30ec23db8f
- SSDEEP 24576:svO2xJKRI2FOkx2LFEvcU6UQOJdBqsCPhH9Do2sl:sHHKO29QG56/OJdJCXDrsl
- TLSH T11E559E32A6808036E5B3467586FA57BAA5257C215321E1CF73C47A2E1FB37D3A93170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-08-28_f75dedcfa905d440d207002f238fe6b6_amadey_coinminer_cryptolocker_elex_graphican_mafia_rhada.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-28_f75dedcfa905d440d207002f238fe6b6_amadey_coinminer_cryptolocker_elex_graphican_mafia_rhada.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-28_f75dedcfa905d440d207002f238fe6b6_amadey_coinminer_cryptolocker_elex_graphican_mafia_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 1.3MB
- SHA256 b05e446efaa956aa08a8693bd532797b34ecd8276d17d07c8b37c70413c569e1
- MD5 f75dedcfa905d440d207002f238fe6b6
- SHA1 d9906c2fb1d70346fc1e271a05ce14b9a9298b50
- SHA512 226f3398281ab0581083a1a3d0b5c47451ba2fb0ba0e081190c3dba25df521aaeb78f3a210f7c2bb886c7f5adefd1b5ec9b7eb17d93eec9193d31f30ec23db8f
- SSDEEP 24576:svO2xJKRI2FOkx2LFEvcU6UQOJdBqsCPhH9Do2sl:sHHKO29QG56/OJdJCXDrsl
- TLSH T11E559E32A6808036E5B3467586FA57BAA5257C215321E1CF73C47A2E1FB37D3A93170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory