General
- Target 2026-05-05_8c4f19aa9591c413f7b4a9d4440f9370_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop
- Size 448KB
- Sample260505-atts2aat3n
- SHA256 cf3e74dea5e717415573bb3aeb72629e7f33457ddc50f5ad8ec95ef16347f115
- MD5 8c4f19aa9591c413f7b4a9d4440f9370
- SHA1 d1cff0dee64c33e367bf0fe3c3547d164994a769
- SHA512 befa0399a246724c81501be24931cd8ef027a5c301a76a45669f55dc89cc060b53c08cdf6e03ea846f0fbc42c08cbf6c2d2e61b912d0874acd0973c4cd0a9b0e
- SSDEEP 6144:ScTgav1cdCTuoPbgwmOLJvKRILSFvdFbcEOkCybEaQRXr9HNdvOaty8KRpPUM:SSvO2x9mONvKRILSF/Okx2LIatyD
- TLSH T132A45C26B7909076C4B78674C8A247AAFBB1BC2127118B8FA39077191F73792BD3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-05_8c4f19aa9591c413f7b4a9d4440f9370_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260130-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-05_8c4f19aa9591c413f7b4a9d4440f9370_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop.exe
Resource
win11-20260130-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-05_8c4f19aa9591c413f7b4a9d4440f9370_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop
- Size 448KB
- SHA256 cf3e74dea5e717415573bb3aeb72629e7f33457ddc50f5ad8ec95ef16347f115
- MD5 8c4f19aa9591c413f7b4a9d4440f9370
- SHA1 d1cff0dee64c33e367bf0fe3c3547d164994a769
- SHA512 befa0399a246724c81501be24931cd8ef027a5c301a76a45669f55dc89cc060b53c08cdf6e03ea846f0fbc42c08cbf6c2d2e61b912d0874acd0973c4cd0a9b0e
- SSDEEP 6144:ScTgav1cdCTuoPbgwmOLJvKRILSFvdFbcEOkCybEaQRXr9HNdvOaty8KRpPUM:SSvO2x9mONvKRILSF/Okx2LIatyD
- TLSH T132A45C26B7909076C4B78674C8A247AAFBB1BC2127118B8FA39077191F73792BD3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory