General
- Target 2026-05-02_3cf18219f901901d0a330c80c030051a_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop
- Size 547KB
- Sample260502-pl5ynaa12p
- SHA256 c27f1731501064f86e8e47e1c6ac45129a803041088195227a410c00922f3430
- MD5 3cf18219f901901d0a330c80c030051a
- SHA1 ca46002a835e003e08ae08272ad826fca7fe67d2
- SHA512 0e386bcbc0f42d5d4b00b1374b76ef90d3adc4e3913b0341b5b4e31eacc85e815b5e6eea802b547d6008fdd8eb1646669ab7da92a04e8fa12b9b932486450886
- SSDEEP 6144:IcTgav1cdCTuoPbgwmOLJvKRILSFvdFDcEOkCybEaQRXr9HNdvOaxy8KARG3:ISvO2x9mONvKRILSFnOkx2LIaxy6RY
- TLSH T118C47C27B6908236C4778675C4E647A6FBB5B511BB228B8F675083190F237D3BE21B1C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-02_3cf18219f901901d0a330c80c030051a_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260130-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-02_3cf18219f901901d0a330c80c030051a_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop.exe
Resource
win11-20260130-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-02_3cf18219f901901d0a330c80c030051a_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop
- Size 547KB
- SHA256 c27f1731501064f86e8e47e1c6ac45129a803041088195227a410c00922f3430
- MD5 3cf18219f901901d0a330c80c030051a
- SHA1 ca46002a835e003e08ae08272ad826fca7fe67d2
- SHA512 0e386bcbc0f42d5d4b00b1374b76ef90d3adc4e3913b0341b5b4e31eacc85e815b5e6eea802b547d6008fdd8eb1646669ab7da92a04e8fa12b9b932486450886
- SSDEEP 6144:IcTgav1cdCTuoPbgwmOLJvKRILSFvdFDcEOkCybEaQRXr9HNdvOaxy8KARG3:ISvO2x9mONvKRILSFnOkx2LIaxy6RY
- TLSH T118C47C27B6908236C4778675C4E647A6FBB5B511BB228B8F675083190F237D3BE21B1C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory