General
- Target 2026-05-07_ec28816f36d669a4c64c502b810e6907_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop
- Size 374KB
- Sample260507-c1bbdaas2j
- SHA256 3a0b277354039137585ef409f3a1f20becbad0668dd0744993c0872fabfda134
- MD5 ec28816f36d669a4c64c502b810e6907
- SHA1 29ebc3c25c08cfbd2b5b8f89744a75bf93f5a1e4
- SHA512 8768cecb453563b890246c633a3133f490979ad17d0fe407b2b78f1a579aba440ccef8c3013d454addbc01e24c63f4b71e7dcaa1bccb45880855f9032600c99f
- SSDEEP 6144:McTgav1cdCTuoPbgwmOLJvKRILSFvdFbcEOkCybEaQRXr9HNdvOaty8K:MSvO2x9mONvKRILSF/Okx2LIaty
- TLSH T177846D2AF6A0D076C4B79579C4A257AAFBB1742137204ACFA390475A1F237E2BD3530D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-07_ec28816f36d669a4c64c502b810e6907_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260130-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-07_ec28816f36d669a4c64c502b810e6907_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop.exe
Resource
win11-20260130-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-07_ec28816f36d669a4c64c502b810e6907_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop
- Size 374KB
- SHA256 3a0b277354039137585ef409f3a1f20becbad0668dd0744993c0872fabfda134
- MD5 ec28816f36d669a4c64c502b810e6907
- SHA1 29ebc3c25c08cfbd2b5b8f89744a75bf93f5a1e4
- SHA512 8768cecb453563b890246c633a3133f490979ad17d0fe407b2b78f1a579aba440ccef8c3013d454addbc01e24c63f4b71e7dcaa1bccb45880855f9032600c99f
- SSDEEP 6144:McTgav1cdCTuoPbgwmOLJvKRILSFvdFbcEOkCybEaQRXr9HNdvOaty8K:MSvO2x9mONvKRILSF/Okx2LIaty
- TLSH T177846D2AF6A0D076C4B79579C4A257AAFBB1742137204ACFA390475A1F237E2BD3530D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Executes dropped EXE
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
Drops file in System32 directory