2026-10-16_27fbf123747563bf8a512173023c58c2_amadey_coinminer_darkgate_elex_manuscrypt_rhadamanthys_smoke-loader_stealc_stop
Classification: Malicious
2026-10-16_27fbf123747563bf8a512173023c58c2_amadey_coinminer_darkgate_elex_manuscrypt_rhadamanthys_smoke-loader_stealc_stop is a malicious file sample.
Detection summary
- 0 antivirus detections
- 0 IDS alerts
- 0 processes observed
- 0 contacted hosts
- 0 DNS requests
MITRE ATT&CK associations
Malware families: RAMSAY (S0458)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Ramsay | Triage | 2026-10-17 21:23:57 | 2026-10-17 21:23:57 | malicious-activity | S0458 Ramsay |
| Generic Malware | Cyber Threat Alliance | 2026-10-17 14:08:33 | 2026-10-17 14:08:33 | malicious-activity |
Tags
ramsay darkhotel apt discovery execution framework rootkit spyware upxSample information
- Filenames
- 2026-10-16_27fbf123747563bf8a512173023c58c2_amadey_coinminer_darkgate_elex_manuscrypt_rhadamanthys_smoke-loader_stealc_stop
- SHA-1
0b7f8a5665d937d1119e4d681d978b0819453cd5- SHA-256
1dec42aed986f02590f6f745c4de538e9ed1f17621779fe3f8e8884b31fd9b04- First indexed
- 2026-10-17 14:08:33
- Last updated
- 2026-10-17 14:08:33