General
- Target 2026-04-17_2d04c3583815d1e7a47c4995e2197d93_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop
- Size 960KB
- Sample260417-ma6ppsbt9k
- SHA256 208f34c30f3125d424b760e3975dbc89a2f1e933e804e401836cacc1d3f5ce1a
- MD5 2d04c3583815d1e7a47c4995e2197d93
- SHA1 9fff971301cac3bb7fa891c1241aec117e95509e
- SHA512 07ec3e5c137182cccafb4deaa2a754198688d8cb5dcdb8b94d718e9b5b4c0e45397bff1c78c681c86b9de70f0b871ee053960f2d7e9fa38d5af7a6cdee27fa9b
- SSDEEP 12288:+SvO2x9mONvKRILSFnOkx2LIaxy4n5FAQjU/u:9vO2xJKRI2FOkx2LFE4scU2
- TLSH T15E253B22F6508135C4B74536C5FA0BEAA6747D21671067CBA3C07B5B2FB36D2A931B0E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-17_2d04c3583815d1e7a47c4995e2197d93_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260130-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-17_2d04c3583815d1e7a47c4995e2197d93_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop.exe
Resource
win11-20260130-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-17_2d04c3583815d1e7a47c4995e2197d93_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop
- Size 960KB
- SHA256 208f34c30f3125d424b760e3975dbc89a2f1e933e804e401836cacc1d3f5ce1a
- MD5 2d04c3583815d1e7a47c4995e2197d93
- SHA1 9fff971301cac3bb7fa891c1241aec117e95509e
- SHA512 07ec3e5c137182cccafb4deaa2a754198688d8cb5dcdb8b94d718e9b5b4c0e45397bff1c78c681c86b9de70f0b871ee053960f2d7e9fa38d5af7a6cdee27fa9b
- SSDEEP 12288:+SvO2x9mONvKRILSFnOkx2LIaxy4n5FAQjU/u:9vO2xJKRI2FOkx2LFE4scU2
- TLSH T15E253B22F6508135C4B74536C5FA0BEAA6747D21671067CBA3C07B5B2FB36D2A931B0E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory