General
- Target 2026-05-04_da375bdfe87b1ad2bc4355ac4b8005b7_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop
- Size 395KB
- Sample260504-bdmv8aay71
- SHA256 78021cd37836493834bcf9dd9fcc50d79a890d71cdc8f26cf14f347675adbfb5
- MD5 da375bdfe87b1ad2bc4355ac4b8005b7
- SHA1 171928cdda29fb2fefc2613a2a809729fcbff4fb
- SHA512 3aad329aa7109dd916af127dcac2b4080caaf8ed81b3499cd4c245ed8e0cf1fcfda221db9f5280206785a4d0bb3c7e7f2dda890ac873e7ed4a98513947692f66
- SSDEEP 6144:7wdK91cVMoSTZu05LOY0ftLy+mgFScEOkCybEaQRXr9HNdvOaxy8K:7n9OVKk05aY0ftLy+MOkx2LIaxy
- TLSH T171846D2AF6A0D076C4B79578C49257A6FBB1742137204ACFA390475A1F637E2BE3630D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-04_da375bdfe87b1ad2bc4355ac4b8005b7_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260130-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-04_da375bdfe87b1ad2bc4355ac4b8005b7_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop.exe
Resource
win11-20260130-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-04_da375bdfe87b1ad2bc4355ac4b8005b7_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop
- Size 395KB
- SHA256 78021cd37836493834bcf9dd9fcc50d79a890d71cdc8f26cf14f347675adbfb5
- MD5 da375bdfe87b1ad2bc4355ac4b8005b7
- SHA1 171928cdda29fb2fefc2613a2a809729fcbff4fb
- SHA512 3aad329aa7109dd916af127dcac2b4080caaf8ed81b3499cd4c245ed8e0cf1fcfda221db9f5280206785a4d0bb3c7e7f2dda890ac873e7ed4a98513947692f66
- SSDEEP 6144:7wdK91cVMoSTZu05LOY0ftLy+mgFScEOkCybEaQRXr9HNdvOaxy8K:7n9OVKk05aY0ftLy+MOkx2LIaxy
- TLSH T171846D2AF6A0D076C4B79578C49257A6FBB1742137204ACFA390475A1F637E2BE3630D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory