General
- Target 2026-05-04_c8a8305a63d15f2fbc7511053b8f7320_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop
- Size 395KB
- Sample260504-k2q28afs71
- SHA256 a5786ebe1af17b4bc68a2c4c25fc806fe3d59349a8872024737d084dca6cb417
- MD5 c8a8305a63d15f2fbc7511053b8f7320
- SHA1 0f3f11c6044e1d8957f5038e2da9da27b427af61
- SHA512 f0f3a2e5b8a2c6c49d67e51f7da9f7705481ab656673715c30f88cb8d23e6cf104be7d75c5e299193a8387094c49e05bce9b58c286c147270fd6aae2d16e51f4
- SSDEEP 6144:kwdK91cVMoSTZu05LOY0ftLy+mgFScEOkCybEaQRXr9HNdvOaxy8K:kn9OVKk05aY0ftLy+MOkx2LIaxy
- TLSH T175846D2AF6A0D076C4B79578C49257A6FBB1742137204ACFA390475A1F637E2BE3630D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-04_c8a8305a63d15f2fbc7511053b8f7320_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260130-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-04_c8a8305a63d15f2fbc7511053b8f7320_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop.exe
Resource
win11-20260130-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-04_c8a8305a63d15f2fbc7511053b8f7320_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop
- Size 395KB
- SHA256 a5786ebe1af17b4bc68a2c4c25fc806fe3d59349a8872024737d084dca6cb417
- MD5 c8a8305a63d15f2fbc7511053b8f7320
- SHA1 0f3f11c6044e1d8957f5038e2da9da27b427af61
- SHA512 f0f3a2e5b8a2c6c49d67e51f7da9f7705481ab656673715c30f88cb8d23e6cf104be7d75c5e299193a8387094c49e05bce9b58c286c147270fd6aae2d16e51f4
- SSDEEP 6144:kwdK91cVMoSTZu05LOY0ftLy+mgFScEOkCybEaQRXr9HNdvOaxy8K:kn9OVKk05aY0ftLy+MOkx2LIaxy
- TLSH T175846D2AF6A0D076C4B79578C49257A6FBB1742137204ACFA390475A1F637E2BE3630D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Executes dropped EXE
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
Drops file in System32 directory