General
- Target 2026-06-26_71211dc59feb9cd99c9ba602dfb62b2e_amadey_coinminer_elex_graphican_remcos_rhadamanthys_smoke-loader_stop
- Size 679KB
- Sample260629-sfefashz5q
- SHA256 0dfc5fc894e27fb538810d494ac1e0b9d0a3be2475da11d572288eb71c4dccfb
- MD5 71211dc59feb9cd99c9ba602dfb62b2e
- SHA1 80740620d0b3d72b3a4df125f7351ce6295e8629
- SHA512 f9269c2b4310d3e57b1ddd8a83fdc7a13c1ddea837594272ebfb55a718dff09ba6dfba193ce760677ec1875ab02e343fe2927f3bd88e21076a88d04321e50d1d
- SSDEEP 12288:mSvO2x9mONvKRILSFnOkx2LIaxya5FAQjU/Lik8CQ3K:FvO2xJKRI2FOkx2LFEvcUQPK
- TLSH T1E4E45A31E641C036D4A74576C6FA0BBFE964BD25131165CBA3C43A262FB36D2BA3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-26_71211dc59feb9cd99c9ba602dfb62b2e_amadey_coinminer_elex_graphican_remcos_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-26_71211dc59feb9cd99c9ba602dfb62b2e_amadey_coinminer_elex_graphican_remcos_rhadamanthys_smoke-loader_stop.exe
Resource
win11ltsc2024-20260629-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-26_71211dc59feb9cd99c9ba602dfb62b2e_amadey_coinminer_elex_graphican_remcos_rhadamanthys_smoke-loader_stop
- Size 679KB
- SHA256 0dfc5fc894e27fb538810d494ac1e0b9d0a3be2475da11d572288eb71c4dccfb
- MD5 71211dc59feb9cd99c9ba602dfb62b2e
- SHA1 80740620d0b3d72b3a4df125f7351ce6295e8629
- SHA512 f9269c2b4310d3e57b1ddd8a83fdc7a13c1ddea837594272ebfb55a718dff09ba6dfba193ce760677ec1875ab02e343fe2927f3bd88e21076a88d04321e50d1d
- SSDEEP 12288:mSvO2x9mONvKRILSFnOkx2LIaxya5FAQjU/Lik8CQ3K:FvO2xJKRI2FOkx2LFEvcUQPK
- TLSH T1E4E45A31E641C036D4A74576C6FA0BBFE964BD25131165CBA3C43A262FB36D2BA3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory