General
- Target 2026-04-18_a47aef2f7e7cd66f770a3b44d913d47b_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop
- Size 548KB
- Sample260418-e8kwwsgx4v
- SHA256 fc2db223717733caafb21bb5c36355a86fa332e42911eeab1b57b697338a8140
- MD5 a47aef2f7e7cd66f770a3b44d913d47b
- SHA1 d60b0f928db0db9e6ceda1f950be1236b5d41e1f
- SHA512 f39ea76dfe3ff002a8c4b7a980230392192c26ef3b4a98a6dc9eb57ec2625ba3cb02076342abad4f62851fd8f22c731a911c9bd929153a1f962749c8735c2c6c
- SSDEEP 12288:0kbOgbKcMoxy9RLW3uqXUHkUXe39+Okx2LIa:tbOgbEqy9RKejHPOwOkx2LF
- TLSH T13BC4AE26F6A0C032C4B79574C4A34AAAFBB1742167204ACFA395475A1F737E2BE3531D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-04-18_a47aef2f7e7cd66f770a3b44d913d47b_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260130-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-18_a47aef2f7e7cd66f770a3b44d913d47b_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop
- Size 548KB
- SHA256 fc2db223717733caafb21bb5c36355a86fa332e42911eeab1b57b697338a8140
- MD5 a47aef2f7e7cd66f770a3b44d913d47b
- SHA1 d60b0f928db0db9e6ceda1f950be1236b5d41e1f
- SHA512 f39ea76dfe3ff002a8c4b7a980230392192c26ef3b4a98a6dc9eb57ec2625ba3cb02076342abad4f62851fd8f22c731a911c9bd929153a1f962749c8735c2c6c
- SSDEEP 12288:0kbOgbKcMoxy9RLW3uqXUHkUXe39+Okx2LIa:tbOgbEqy9RKejHPOwOkx2LF
- TLSH T13BC4AE26F6A0C032C4B79574C4A34AAAFBB1742167204ACFA395475A1F737E2BE3531D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Custom signature
UPX dump on OEP (original entry point)
Executes dropped EXE
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
Drops file in System32 directory