General
- Target 2026-10-01_fce3783116fa66c4310570a613264dd5_amadey_coinminer_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 560KB
- Sample261003-w22phaeg26
- SHA256 f0c74073f0d51057bc9729c416071c0f25cbfb1117456ccf6e680525d891397a
- MD5 fce3783116fa66c4310570a613264dd5
- SHA1 88563cb2c01171d6970a3bc3a6eecdb4230b7739
- SHA512 5f9a4e067f45d075c00bc2ab0b2f2e12ea9acef9a75a78339775aa85cb353b655aaf0b63e3839ee4f45df62cdb4df87aa800b92a90df300e72d5a395c4304020
- SSDEEP 12288:03Sgbu4VOGWPSqt6IpouYgCEmx1z725uRG9OArjlI6YeLm08XsOkx2LIa+y:4VOL4/gPXKCOkx2LFR
- TLSH T149C46D2AB6E0D076C4B79574C4A256A6FFB1B43127204ACF6390475A1F637E2BE3530E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-10-01_fce3783116fa66c4310570a613264dd5_amadey_coinminer_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-01_fce3783116fa66c4310570a613264dd5_amadey_coinminer_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 560KB
- SHA256 f0c74073f0d51057bc9729c416071c0f25cbfb1117456ccf6e680525d891397a
- MD5 fce3783116fa66c4310570a613264dd5
- SHA1 88563cb2c01171d6970a3bc3a6eecdb4230b7739
- SHA512 5f9a4e067f45d075c00bc2ab0b2f2e12ea9acef9a75a78339775aa85cb353b655aaf0b63e3839ee4f45df62cdb4df87aa800b92a90df300e72d5a395c4304020
- SSDEEP 12288:03Sgbu4VOGWPSqt6IpouYgCEmx1z725uRG9OArjlI6YeLm08XsOkx2LIa+y:4VOL4/gPXKCOkx2LFR
- TLSH T149C46D2AB6E0D076C4B79574C4A256A6FFB1B43127204ACF6390475A1F637E2BE3530E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory