General
- Target 2026-11-09_80738e56c041709131adbcbd1f3c96ee_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 419KB
- Sample261110-rwbtnsvshs
- SHA256 c38da4015925464bb97174c8468bc45fcb80e98e37eb99caf5022a56a6ca9431
- MD5 80738e56c041709131adbcbd1f3c96ee
- SHA1 e59cf72770dc2644fe6ebef99132947adb755bf6
- SHA512 358a1bb96c9ab623f194c32c96bd508fedc331195eb2436c77f3abc9bf6e748056413128d2ee3aab2d07323b9187d72134e01bd4b7d68fd676acf0eec87ab140
- SSDEEP 6144:46DmGnV0H2LALrYcdwVDL+gqFCcEOkCybEaQRXr9HNdvOa:46D/WiA3YcyVDLjOkx2LIa
- TLSH T1F1947C29BAE08073C5678576C4E257A6FBB1B52127108ACFA390475A1F237E3BD3531E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-11-09_80738e56c041709131adbcbd1f3c96ee_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-09_80738e56c041709131adbcbd1f3c96ee_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-09_80738e56c041709131adbcbd1f3c96ee_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 419KB
- SHA256 c38da4015925464bb97174c8468bc45fcb80e98e37eb99caf5022a56a6ca9431
- MD5 80738e56c041709131adbcbd1f3c96ee
- SHA1 e59cf72770dc2644fe6ebef99132947adb755bf6
- SHA512 358a1bb96c9ab623f194c32c96bd508fedc331195eb2436c77f3abc9bf6e748056413128d2ee3aab2d07323b9187d72134e01bd4b7d68fd676acf0eec87ab140
- SSDEEP 6144:46DmGnV0H2LALrYcdwVDL+gqFCcEOkCybEaQRXr9HNdvOa:46D/WiA3YcyVDLjOkx2LIa
- TLSH T1F1947C29BAE08073C5678576C4E257A6FBB1B52127108ACFA390475A1F237E3BD3531E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Executes dropped EXE
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
Drops file in System32 directory