General
- Target 2026-10-02_2cbb383297c2525e1c7a2c8c34311f5e_amadey_coinminer_cryptolocker_elex_graphican_mafia_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 1.3MB
- Sample261003-sqlbladh55
- SHA256 efff41535e7f98f9957cb8018a1e32c8f7da0f6d2d8ba2f3217e67fc95b36576
- MD5 2cbb383297c2525e1c7a2c8c34311f5e
- SHA1 ca7cfd595125c27b362c46c1e3e81a365e9a9600
- SHA512 32e80d5a79e5c1332d156457ef3374dd873eb30ed20abb4735c3d841e1ac8db48e81df630df2310456ecc26587c144720b5122854b4fe51de908004ac479af85
- SSDEEP 24576:QvO2xJKRI2FOkx2LFEvcU6UQOJdBqsCPhH9Do2sl:QHHKO29QG56/OJdJCXDrsl
- TLSH T1FB559E32A6808036E5B3467586FA57BAA5257C215321E1CF73C47A2E1FB37D3A93170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-10-02_2cbb383297c2525e1c7a2c8c34311f5e_amadey_coinminer_cryptolocker_elex_graphican_mafia_rhada.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-02_2cbb383297c2525e1c7a2c8c34311f5e_amadey_coinminer_cryptolocker_elex_graphican_mafia_rhada.exe
Resource
win11ltsc2024-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-02_2cbb383297c2525e1c7a2c8c34311f5e_amadey_coinminer_cryptolocker_elex_graphican_mafia_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 1.3MB
- SHA256 efff41535e7f98f9957cb8018a1e32c8f7da0f6d2d8ba2f3217e67fc95b36576
- MD5 2cbb383297c2525e1c7a2c8c34311f5e
- SHA1 ca7cfd595125c27b362c46c1e3e81a365e9a9600
- SHA512 32e80d5a79e5c1332d156457ef3374dd873eb30ed20abb4735c3d841e1ac8db48e81df630df2310456ecc26587c144720b5122854b4fe51de908004ac479af85
- SSDEEP 24576:QvO2xJKRI2FOkx2LFEvcU6UQOJdBqsCPhH9Do2sl:QHHKO29QG56/OJdJCXDrsl
- TLSH T1FB559E32A6808036E5B3467586FA57BAA5257C215321E1CF73C47A2E1FB37D3A93170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory