General
- Target 2026-04-22_227fd55ba9d3bfb5116b0752732e58f9_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop
- Size 395KB
- Sample260422-tk3jcse17x
- SHA256 72852332cddc95176fec129f15db02e52ee00ae0ac5bf96105eaacdbcf2ac77f
- MD5 227fd55ba9d3bfb5116b0752732e58f9
- SHA1 0a7b05aaee62c245d81847c37fdc4f00fa1be5f5
- SHA512 8bcdbbe95d348fc73c0545bcc4bf040111191d3239f224e1165cf37bd024c5539508c4274d78fa14091c1baa01d0aaa8d079e516276e29ed2fc5d3b277146888
- SSDEEP 6144:FwdK91cVMoSTZu05LOY0ftLy+mgFScEOkCybEaQRXr9HNdvOaxy8K:Fn9OVKk05aY0ftLy+MOkx2LIaxy
- TLSH T1E9846D2AF6A0D076C4B79578C49257A6FBB1742137204ACFA390475A1F637E2BE3630D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-22_227fd55ba9d3bfb5116b0752732e58f9_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260130-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-22_227fd55ba9d3bfb5116b0752732e58f9_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop.exe
Resource
win11-20260130-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-22_227fd55ba9d3bfb5116b0752732e58f9_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop
- Size 395KB
- SHA256 72852332cddc95176fec129f15db02e52ee00ae0ac5bf96105eaacdbcf2ac77f
- MD5 227fd55ba9d3bfb5116b0752732e58f9
- SHA1 0a7b05aaee62c245d81847c37fdc4f00fa1be5f5
- SHA512 8bcdbbe95d348fc73c0545bcc4bf040111191d3239f224e1165cf37bd024c5539508c4274d78fa14091c1baa01d0aaa8d079e516276e29ed2fc5d3b277146888
- SSDEEP 6144:FwdK91cVMoSTZu05LOY0ftLy+mgFScEOkCybEaQRXr9HNdvOaxy8K:Fn9OVKk05aY0ftLy+MOkx2LIaxy
- TLSH T1E9846D2AF6A0D076C4B79578C49257A6FBB1742137204ACFA390475A1F637E2BE3630D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory