General
- Target 2026-05-11_2b28bcc1729b8d7d5232689a3d9d9bd3_amadey_coinminer_elex_graphican_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 395KB
- Sample260511-a2bx7agy5v
- SHA256 1c473290690e1bacdd1de4d4a9fb99e64682499d25cbfa004fafa277bc5905f1
- MD5 2b28bcc1729b8d7d5232689a3d9d9bd3
- SHA1 92aa8b43526081cdaaf6b888baa64155962ddd58
- SHA512 17114d7a8ca4879664226db2cf83ae3d4797a72c483599c8d721a6b14c9d2a790915ca9cb0be490e9b428c75cfa67c48d03d57df7c743e1632118c1f22b73647
- SSDEEP 6144:8w6O71c8GoBjS3BYLvV61qL2LZlRFZcEOkCybEaQRXr9HNdvOaty8K:8Q7O8f8BY7V61qL2LNOkx2LIaty
- TLSH T18C846C2AF6A09072C4779579C4A256A6FFB1B42237204ACFA390475A1F337E2BD3531D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-11_2b28bcc1729b8d7d5232689a3d9d9bd3_amadey_coinminer_elex_graphican_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260130-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-11_2b28bcc1729b8d7d5232689a3d9d9bd3_amadey_coinminer_elex_graphican_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win11-20260130-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-11_2b28bcc1729b8d7d5232689a3d9d9bd3_amadey_coinminer_elex_graphican_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 395KB
- SHA256 1c473290690e1bacdd1de4d4a9fb99e64682499d25cbfa004fafa277bc5905f1
- MD5 2b28bcc1729b8d7d5232689a3d9d9bd3
- SHA1 92aa8b43526081cdaaf6b888baa64155962ddd58
- SHA512 17114d7a8ca4879664226db2cf83ae3d4797a72c483599c8d721a6b14c9d2a790915ca9cb0be490e9b428c75cfa67c48d03d57df7c743e1632118c1f22b73647
- SSDEEP 6144:8w6O71c8GoBjS3BYLvV61qL2LZlRFZcEOkCybEaQRXr9HNdvOaty8K:8Q7O8f8BY7V61qL2LNOkx2LIaty
- TLSH T18C846C2AF6A09072C4779579C4A256A6FFB1B42237204ACFA390475A1F337E2BD3531D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory