General
- Target 2026-04-15_363f9289af6ef9ec58cc8b9fd45a95a8_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader
- Size 395KB
- Sample260415-c9jdcahs51
- SHA256 2d4a3baf7c231179ae3007b99e874bcaed0a39638b709d2da60719581ac7e654
- MD5 363f9289af6ef9ec58cc8b9fd45a95a8
- SHA1 fae2a8a19d1e9ab260b38b64f52c9c86476b2526
- SHA512 dad5c03de6b98da5f8de0cdaa900e9a62a58622e9645c8d1a144fe9a17291a95f46ee5312fbff8fc29841325e05054b6339ea2ee0c1d3d94361c74ec1a094c27
- SSDEEP 6144:+g/AL1cVUoG1XRlL0wcJtL2KmEFEcEOkCybEaQRXr9HNdvOaty8K:+nLOVWLlowcJtL2KyOkx2LIaty
- TLSH T1B8847C26F6A08036C5B79578C4A396A6FFB1742137248ACFA390475A1F237E2BD3531D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-15_363f9289af6ef9ec58cc8b9fd45a95a8_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260130-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-15_363f9289af6ef9ec58cc8b9fd45a95a8_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader.exe
Resource
win11-20260130-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-15_363f9289af6ef9ec58cc8b9fd45a95a8_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader
- Size 395KB
- SHA256 2d4a3baf7c231179ae3007b99e874bcaed0a39638b709d2da60719581ac7e654
- MD5 363f9289af6ef9ec58cc8b9fd45a95a8
- SHA1 fae2a8a19d1e9ab260b38b64f52c9c86476b2526
- SHA512 dad5c03de6b98da5f8de0cdaa900e9a62a58622e9645c8d1a144fe9a17291a95f46ee5312fbff8fc29841325e05054b6339ea2ee0c1d3d94361c74ec1a094c27
- SSDEEP 6144:+g/AL1cVUoG1XRlL0wcJtL2KmEFEcEOkCybEaQRXr9HNdvOaty8K:+nLOVWLlowcJtL2KyOkx2LIaty
- TLSH T1B8847C26F6A08036C5B79578C4A396A6FFB1742137248ACFA390475A1F237E2BD3531D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory