General
- Target 2026-04-16_3230988e090e1a4c5a5a792cfb3a2598_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop
- Size 547KB
- Sample260416-hmqrsscv71
- SHA256 a55138f3a7cf0dccfed2fe81fbfa1c5f0498833777d72c7a84e3ce3c88c3b982
- MD5 3230988e090e1a4c5a5a792cfb3a2598
- SHA1 a0fa8315bc8c030ffbb14be626ac93528f1473dc
- SHA512 81db40a0e0a345dcf6b49c613e43c313410f92930af917bd7087a255f83d3887d5c68c383ff8892ce048b189070df3a78de2572a3f524669b512bf3fce7570cb
- SSDEEP 6144:CcTgav1cdCTuoPbgwmOLJvKRILSFvdFDcEOkCybEaQRXr9HNdvOaxy8KARG3:CSvO2x9mONvKRILSFnOkx2LIaxy6RY
- TLSH T13BC47C27B6908236C4778675C4E647A6FBB5B511BB228B8F675083190F237D3BE21B1C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-16_3230988e090e1a4c5a5a792cfb3a2598_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260130-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-16_3230988e090e1a4c5a5a792cfb3a2598_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop.exe
Resource
win11-20260130-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-16_3230988e090e1a4c5a5a792cfb3a2598_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop
- Size 547KB
- SHA256 a55138f3a7cf0dccfed2fe81fbfa1c5f0498833777d72c7a84e3ce3c88c3b982
- MD5 3230988e090e1a4c5a5a792cfb3a2598
- SHA1 a0fa8315bc8c030ffbb14be626ac93528f1473dc
- SHA512 81db40a0e0a345dcf6b49c613e43c313410f92930af917bd7087a255f83d3887d5c68c383ff8892ce048b189070df3a78de2572a3f524669b512bf3fce7570cb
- SSDEEP 6144:CcTgav1cdCTuoPbgwmOLJvKRILSFvdFDcEOkCybEaQRXr9HNdvOaxy8KARG3:CSvO2x9mONvKRILSFnOkx2LIaxy6RY
- TLSH T13BC47C27B6908236C4778675C4E647A6FBB5B511BB228B8F675083190F237D3BE21B1C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory