General
- Target 2026-04-15_4fbea156b33dda91dbbba94b4800fbc5_amadey_coinminer_elex_graphican_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 395KB
- Sample260415-qea1daez5j
- SHA256 e757809f8e3a29861781c884f4e49ab3b8f4fd1df73f69b551eb39e56e8ad00a
- MD5 4fbea156b33dda91dbbba94b4800fbc5
- SHA1 88fddcfba00390e926a1b8166446e5f93034a59e
- SHA512 cd541391a4ddb6d9206ca7f51364513df4cfb8d99bc064ab2971212e2bcedec7d91dcbf9a5b8fb3ea52fab13ad69c86b4437594c93db0f14fe1d3ab4a8ae8809
- SSDEEP 6144:8w6O71c8GoBjS3BYLvV61qL2LZlRFZcEOkCybEaQRXr9HNdvOaty8K:8Q7O8f8BY7V61qL2LNOkx2LIaty
- TLSH T1BE846C2AF6A09072C4779579C4A256A6FFB1B42237204ACFA390475A1F337E2BD3531D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-15_4fbea156b33dda91dbbba94b4800fbc5_amadey_coinminer_elex_graphican_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260130-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-15_4fbea156b33dda91dbbba94b4800fbc5_amadey_coinminer_elex_graphican_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win11-20260130-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-15_4fbea156b33dda91dbbba94b4800fbc5_amadey_coinminer_elex_graphican_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 395KB
- SHA256 e757809f8e3a29861781c884f4e49ab3b8f4fd1df73f69b551eb39e56e8ad00a
- MD5 4fbea156b33dda91dbbba94b4800fbc5
- SHA1 88fddcfba00390e926a1b8166446e5f93034a59e
- SHA512 cd541391a4ddb6d9206ca7f51364513df4cfb8d99bc064ab2971212e2bcedec7d91dcbf9a5b8fb3ea52fab13ad69c86b4437594c93db0f14fe1d3ab4a8ae8809
- SSDEEP 6144:8w6O71c8GoBjS3BYLvV61qL2LZlRFZcEOkCybEaQRXr9HNdvOaty8K:8Q7O8f8BY7V61qL2LNOkx2LIaty
- TLSH T1BE846C2AF6A09072C4779579C4A256A6FFB1B42237204ACFA390475A1F337E2BD3531D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory