General
- Target 2026-06-26_df16d7506cc14198bad287af40325e85_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop
- Size 704KB
- Sample260629-ntssmad12l
- SHA256 0bc710aaa2800f188f000ba9c61afcda8361593bec6517e2c94d57e9eb511232
- MD5 df16d7506cc14198bad287af40325e85
- SHA1 ce6b14ca31030e120afc3c1f51b63b1afe477e8f
- SHA512 a0214222cb47aaa0a452cf9b992d7e3f9fa7a12c829bd09926d9143ac70da9349f76e699b419fa3e5d5bfc5e5e044d838b2ab598a0eabf663f968b969039099f
- SSDEEP 12288:2SvO2x9mONvKRILSFnOkx2LIaxy6RJ05r:1vO2xJKRI2FOkx2LFEF
- TLSH T140E46C26B7908136C477463585AB47A6EBB5BD11AB228B8F6340731D0F73793AE31B1C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-26_df16d7506cc14198bad287af40325e85_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-26_df16d7506cc14198bad287af40325e85_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop.exe
Resource
win11ltsc2024-20260629-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-26_df16d7506cc14198bad287af40325e85_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop
- Size 704KB
- SHA256 0bc710aaa2800f188f000ba9c61afcda8361593bec6517e2c94d57e9eb511232
- MD5 df16d7506cc14198bad287af40325e85
- SHA1 ce6b14ca31030e120afc3c1f51b63b1afe477e8f
- SHA512 a0214222cb47aaa0a452cf9b992d7e3f9fa7a12c829bd09926d9143ac70da9349f76e699b419fa3e5d5bfc5e5e044d838b2ab598a0eabf663f968b969039099f
- SSDEEP 12288:2SvO2x9mONvKRILSFnOkx2LIaxy6RJ05r:1vO2xJKRI2FOkx2LFEF
- TLSH T140E46C26B7908136C477463585AB47A6EBB5BD11AB228B8F6340731D0F73793AE31B1C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory