General
- Target 2026-04-20_8598704d6f5a8857e89766a1f3c331bf_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop
- Size 395KB
- Sample260420-gqbavaev2x
- SHA256 159fc5ad9bb340fe9865d1f6e88c068c6bcf8be638b51d862eaace9cc9e16a5f
- MD5 8598704d6f5a8857e89766a1f3c331bf
- SHA1 19c6ec4092fa05959082ef48adcc82581a1e355c
- SHA512 591d2d280e98b581aba1cdd109f13524e483aeb68cf448b4d2416224ca9ae8efa4eddaf61b47a1659d8ada01821b3779229c8fe9c45806ed16fca99ce04d7999
- SSDEEP 6144:OwdK91cVMoSTZu05LOY0ftLy+mgFScEOkCybEaQRXr9HNdvOaxy8K:On9OVKk05aY0ftLy+MOkx2LIaxy
- TLSH T140846D2AF6A0D076C4B79578C49257A6FBB1742137204ACFA390475A1F637E2BE3630D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-20_8598704d6f5a8857e89766a1f3c331bf_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260130-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-20_8598704d6f5a8857e89766a1f3c331bf_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop.exe
Resource
win11-20260130-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-20_8598704d6f5a8857e89766a1f3c331bf_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop
- Size 395KB
- SHA256 159fc5ad9bb340fe9865d1f6e88c068c6bcf8be638b51d862eaace9cc9e16a5f
- MD5 8598704d6f5a8857e89766a1f3c331bf
- SHA1 19c6ec4092fa05959082ef48adcc82581a1e355c
- SHA512 591d2d280e98b581aba1cdd109f13524e483aeb68cf448b4d2416224ca9ae8efa4eddaf61b47a1659d8ada01821b3779229c8fe9c45806ed16fca99ce04d7999
- SSDEEP 6144:OwdK91cVMoSTZu05LOY0ftLy+mgFScEOkCybEaQRXr9HNdvOaxy8K:On9OVKk05aY0ftLy+MOkx2LIaxy
- TLSH T140846D2AF6A0D076C4B79578C49257A6FBB1742137204ACFA390475A1F637E2BE3630D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory