General
- Target 2026-07-04_58738f98c67ee7467e3a3196fea0f09f_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop
- Size 374KB
- Sample260704-mks7cses81
- SHA256 c625c6803b21f37cd6d2464f36320198262568667d38bee84ba8448e9cdaa11e
- MD5 58738f98c67ee7467e3a3196fea0f09f
- SHA1 3f977566b4b8f835f5cb08a9bfee63d3ad1d9a1d
- SHA512 0823348c1673c576384a8ecf30605c3634522e7130c9b9f88bddb44f1b199c5cbda1a885c57f53e69940b788a0828312150dfa77668849282785dc22f832ae27
- SSDEEP 6144:+cTgav1cdCTuoPbgwmOLJvKRILSFvdFfcEOkCybEaQRXr9HNdvOaxy8K:+SvO2x9mONvKRILSFLOkx2LIaxy
- TLSH T18D846D2AF6A0D076C4B79579C4A257AAFBB1742137204ACFA390475A1F237E2BD3530D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-04_58738f98c67ee7467e3a3196fea0f09f_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-04_58738f98c67ee7467e3a3196fea0f09f_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop.exe
Resource
win11ltsc2024-20260629-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-04_58738f98c67ee7467e3a3196fea0f09f_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop
- Size 374KB
- SHA256 c625c6803b21f37cd6d2464f36320198262568667d38bee84ba8448e9cdaa11e
- MD5 58738f98c67ee7467e3a3196fea0f09f
- SHA1 3f977566b4b8f835f5cb08a9bfee63d3ad1d9a1d
- SHA512 0823348c1673c576384a8ecf30605c3634522e7130c9b9f88bddb44f1b199c5cbda1a885c57f53e69940b788a0828312150dfa77668849282785dc22f832ae27
- SSDEEP 6144:+cTgav1cdCTuoPbgwmOLJvKRILSFvdFfcEOkCybEaQRXr9HNdvOaxy8K:+SvO2x9mONvKRILSFLOkx2LIaxy
- TLSH T18D846D2AF6A0D076C4B79579C4A257AAFBB1742137204ACFA390475A1F237E2BD3530D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory