General
- Target 2026-10-08_322a3dd306b0c5dd76cd4f19e7dada36_amadey_coinminer_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 560KB
- Sample261009-wc9c2sdb76
- SHA256 580386bff8d203928d70873af5ca5cc53185b4dab542b6d4fc300546952d89ce
- MD5 322a3dd306b0c5dd76cd4f19e7dada36
- SHA1 a53a7d7ab84b77bc89f1d72724ab4d909229df03
- SHA512 41aa94af02b8ebd5ecb37fea41ba2e29a14eb65fa19621ac99a3c6732940be98230f91c05a2acae2d9131c89da311eabef918a3f1c9badd491f4238c16ae4d4e
- SSDEEP 12288:73Sgbu4VOGWPSqt6IpouYgCEmx1z725uRG9OArjlI6YeLm08XsOkx2LIa+y:pVOL4/gPXKCOkx2LFR
- TLSH T1F0C46D2AB6E0D076C4B79574C4A256A6FFB1B43127204ACF6390475A1F637E2BE3530E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-10-08_322a3dd306b0c5dd76cd4f19e7dada36_amadey_coinminer_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-08_322a3dd306b0c5dd76cd4f19e7dada36_amadey_coinminer_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 560KB
- SHA256 580386bff8d203928d70873af5ca5cc53185b4dab542b6d4fc300546952d89ce
- MD5 322a3dd306b0c5dd76cd4f19e7dada36
- SHA1 a53a7d7ab84b77bc89f1d72724ab4d909229df03
- SHA512 41aa94af02b8ebd5ecb37fea41ba2e29a14eb65fa19621ac99a3c6732940be98230f91c05a2acae2d9131c89da311eabef918a3f1c9badd491f4238c16ae4d4e
- SSDEEP 12288:73Sgbu4VOGWPSqt6IpouYgCEmx1z725uRG9OArjlI6YeLm08XsOkx2LIa+y:pVOL4/gPXKCOkx2LFR
- TLSH T1F0C46D2AB6E0D076C4B79574C4A256A6FFB1B43127204ACF6390475A1F637E2BE3530E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory