General
- Target 2026-10-10_0482b9148898f5c575f78485e886aead_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 419KB
- Sample261011-2hf7caac88
- SHA256 15fef3d7552076ae159a02a714cdba3f3dc63f2325dba9c685312a3c8aabe989
- MD5 0482b9148898f5c575f78485e886aead
- SHA1 aa265a5d72f90568b0fe2e228aca3a7c2d25fafa
- SHA512 efe19215fea50f2997c19eedd4a6f0a8de76fb823ff8f4ea25f2b3adad5c28474a64bfc6f9693027f2c414f0a0f3330a5b3315c5c23650d3f0afa9568afb1425
- SSDEEP 6144:Q6DmGnV0H2LALrYcdwVDL+gqFCcEOkCybEaQRXr9HNdvOa:Q6D/WiA3YcyVDLjOkx2LIa
- TLSH T143947C29BAE08073C5678576C4E257A6FBB1B52127108ACFA390475A1F237E3BD3531E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-10_0482b9148898f5c575f78485e886aead_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-10_0482b9148898f5c575f78485e886aead_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-10_0482b9148898f5c575f78485e886aead_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 419KB
- SHA256 15fef3d7552076ae159a02a714cdba3f3dc63f2325dba9c685312a3c8aabe989
- MD5 0482b9148898f5c575f78485e886aead
- SHA1 aa265a5d72f90568b0fe2e228aca3a7c2d25fafa
- SHA512 efe19215fea50f2997c19eedd4a6f0a8de76fb823ff8f4ea25f2b3adad5c28474a64bfc6f9693027f2c414f0a0f3330a5b3315c5c23650d3f0afa9568afb1425
- SSDEEP 6144:Q6DmGnV0H2LALrYcdwVDL+gqFCcEOkCybEaQRXr9HNdvOa:Q6D/WiA3YcyVDLjOkx2LIa
- TLSH T143947C29BAE08073C5678576C4E257A6FBB1B52127108ACFA390475A1F237E3BD3531E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory