General
- Target 2026-05-10_67e83231aeb262c0d7127b08f60ad3a1_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop
- Size 548KB
- Sample260510-bezleafy3s
- SHA256 32f03286919b7980d5a6968dd53ee689c0d64e0b92c3042ec0cfe6bb4f01dac3
- MD5 67e83231aeb262c0d7127b08f60ad3a1
- SHA1 8fec355e5ebea2f9d21707e6f8dd4faaa5c9e3a8
- SHA512 4a4ed487e17391e07f363848d2ee778f78d2c23bb16e2b44c67070ff512763f5844b128d0e6433c2589f3fc491d9edf8b82fbce06aac6abe58b8864df4d85404
- SSDEEP 12288:MkbOgbKcMoxy9RLW3uqXUHkUXe39+Okx2LIa:lbOgbEqy9RKejHPOwOkx2LF
- TLSH T17BC4AE26F6A0C032C4B79574C4A34AAAFBB1742167204ACFA395475A1F737E2BE3531D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-05-10_67e83231aeb262c0d7127b08f60ad3a1_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260130-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-10_67e83231aeb262c0d7127b08f60ad3a1_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop.exe
Resource
win11-20260130-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-10_67e83231aeb262c0d7127b08f60ad3a1_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop
- Size 548KB
- SHA256 32f03286919b7980d5a6968dd53ee689c0d64e0b92c3042ec0cfe6bb4f01dac3
- MD5 67e83231aeb262c0d7127b08f60ad3a1
- SHA1 8fec355e5ebea2f9d21707e6f8dd4faaa5c9e3a8
- SHA512 4a4ed487e17391e07f363848d2ee778f78d2c23bb16e2b44c67070ff512763f5844b128d0e6433c2589f3fc491d9edf8b82fbce06aac6abe58b8864df4d85404
- SSDEEP 12288:MkbOgbKcMoxy9RLW3uqXUHkUXe39+Okx2LIa:lbOgbEqy9RKejHPOwOkx2LF
- TLSH T17BC4AE26F6A0C032C4B79574C4A34AAAFBB1742167204ACFA395475A1F737E2BE3531D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory