General
- Target 2026-05-05_02a448f1d4c5857f8177b93d32e95c09_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop
- Size 832KB
- Sample260505-eamylafy9t
- SHA256 a176443414c24b9a83cc74fbdd4c070c8cfbd9a4b56ca65fa5e54696683dccfb
- MD5 02a448f1d4c5857f8177b93d32e95c09
- SHA1 adedd843655c56b4d71c4d6517110a62e27ae3b9
- SHA512 808bb11eddfbd564352bd3d0132895fa94e0c76f66d0f93740580b606b12fcd5c1f3e26cd97598cc4e722d9de722c235632d0815b1cb5747b3436985511b9444
- SSDEEP 12288:9SvO2x9mONvKRILSFnOkx2LIaxy6RJ05FAQjU/LU:cvO2xJKRI2FOkx2LFEAcUY
- TLSH T101056C22F241C13AD4A7467185FE07ABA674BD10571257CBA3847B2A1FB36D2BE31B0D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-05_02a448f1d4c5857f8177b93d32e95c09_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260130-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-05_02a448f1d4c5857f8177b93d32e95c09_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop.exe
Resource
win11-20260130-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-05_02a448f1d4c5857f8177b93d32e95c09_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop
- Size 832KB
- SHA256 a176443414c24b9a83cc74fbdd4c070c8cfbd9a4b56ca65fa5e54696683dccfb
- MD5 02a448f1d4c5857f8177b93d32e95c09
- SHA1 adedd843655c56b4d71c4d6517110a62e27ae3b9
- SHA512 808bb11eddfbd564352bd3d0132895fa94e0c76f66d0f93740580b606b12fcd5c1f3e26cd97598cc4e722d9de722c235632d0815b1cb5747b3436985511b9444
- SSDEEP 12288:9SvO2x9mONvKRILSFnOkx2LIaxy6RJ05FAQjU/LU:cvO2xJKRI2FOkx2LFEAcUY
- TLSH T101056C22F241C13AD4A7467185FE07ABA674BD10571257CBA3847B2A1FB36D2BE31B0D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory