General
- Target 2026-10-31_810ecca59205296b3a6d64b3825cccdd_amadey_coinminer_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 560KB
- Sample261101-3khnmayxex
- SHA256 2b44594f085fabd6cfe15d13113d5de4fe9b0b1cb0233d6e439304fff3ea016b
- MD5 810ecca59205296b3a6d64b3825cccdd
- SHA1 c74a68960df90fb63f4adae7c9cba73f062a8de0
- SHA512 b995346b99eeba2bd4313a478f4c11355d16149a395631ad60b79eec6a0d0617060c79b9d4760beb6f5bdbd15bf70b41ffe8a2822007ed896e303dc6fe825290
- SSDEEP 12288:33Sgbu4VOGWPSqt6IpouYgCEmx1z725uRG9OArjlI6YeLm08XsOkx2LIa+y:FVOL4/gPXKCOkx2LFR
- TLSH T189C46D2AB6E0D076C4B79574C4A256A6FFB1B43127204ACF6390475A1F637E2BE3530E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-10-31_810ecca59205296b3a6d64b3825cccdd_amadey_coinminer_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-31_810ecca59205296b3a6d64b3825cccdd_amadey_coinminer_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 560KB
- SHA256 2b44594f085fabd6cfe15d13113d5de4fe9b0b1cb0233d6e439304fff3ea016b
- MD5 810ecca59205296b3a6d64b3825cccdd
- SHA1 c74a68960df90fb63f4adae7c9cba73f062a8de0
- SHA512 b995346b99eeba2bd4313a478f4c11355d16149a395631ad60b79eec6a0d0617060c79b9d4760beb6f5bdbd15bf70b41ffe8a2822007ed896e303dc6fe825290
- SSDEEP 12288:33Sgbu4VOGWPSqt6IpouYgCEmx1z725uRG9OArjlI6YeLm08XsOkx2LIa+y:FVOL4/gPXKCOkx2LFR
- TLSH T189C46D2AB6E0D076C4B79574C4A256A6FFB1B43127204ACF6390475A1F637E2BE3530E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory