General
- Target 2026-04-28_a4f9a7713b87299a66580a6dfd5ee4fc_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop
- Size 395KB
- Sample260428-cdq4bacw2v
- SHA256 4c63644acf306555055226803226947279bb840b0680fa3a1c70ce4b30db09ae
- MD5 a4f9a7713b87299a66580a6dfd5ee4fc
- SHA1 ba61273615ab0ca41404c537fc04640aee522b19
- SHA512 dc6e6675f2e89fb61940a9715ed10e3c83326d832222f334151a8ad5de86675e42e4431a3599b03606f18739eafc57264c4ee8a7eb810f6d03b33af163c221d5
- SSDEEP 6144:WWVrC1c2oonALgPLj7vfFLKlOIFGcEOkCybEaQRXr9HNdvOaxy8K:WkCO2zVPX7vfFLKlwOkx2LIaxy
- TLSH T1BD846B2AB6A0D036C4779574C4A257AAFFB1B42237204ACFA390475A1F237E2BD7531D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-28_a4f9a7713b87299a66580a6dfd5ee4fc_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260130-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-28_a4f9a7713b87299a66580a6dfd5ee4fc_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop.exe
Resource
win11-20260130-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-28_a4f9a7713b87299a66580a6dfd5ee4fc_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop
- Size 395KB
- SHA256 4c63644acf306555055226803226947279bb840b0680fa3a1c70ce4b30db09ae
- MD5 a4f9a7713b87299a66580a6dfd5ee4fc
- SHA1 ba61273615ab0ca41404c537fc04640aee522b19
- SHA512 dc6e6675f2e89fb61940a9715ed10e3c83326d832222f334151a8ad5de86675e42e4431a3599b03606f18739eafc57264c4ee8a7eb810f6d03b33af163c221d5
- SSDEEP 6144:WWVrC1c2oonALgPLj7vfFLKlOIFGcEOkCybEaQRXr9HNdvOaxy8K:WkCO2zVPX7vfFLKlwOkx2LIaxy
- TLSH T1BD846B2AB6A0D036C4779574C4A257AAFFB1B42237204ACFA390475A1F237E2BD7531D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory