General
- Target 2026-07-11_8c17d9e6a0a004293c6abe8f7fe358c9_amadey_coinminer_elex_graphican_remcos_rhadamanthys_smoke-loader_stop
- Size 419KB
- Sample260711-ezzcxsdx5x
- SHA256 f7dd9b4f1d1d6d31a06464102e9f748e1d0ce92649c0bf39b2109bf221899517
- MD5 8c17d9e6a0a004293c6abe8f7fe358c9
- SHA1 532e0edaa94202e1dd4359b19f8009c1f9abaf29
- SHA512 9d24719aa25724278d0618830af0f44b947f3b3b5e8e8d3e58e122c120db34799cd1df49e09bcdbff067dd768422cde9f36e78351881828cddfbd42a8d1d711d
- SSDEEP 6144:oatygN+TkFSLZ+knaTDH76VFwcEOkCybEaQRXr9HNdvOa:oatG+S9+kaTDHrOkx2LIa
- TLSH T1C2948C19FAA08076C563857AC4E257A6FBB1B5223B109ACF639007565F237E3BD3530E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-11_8c17d9e6a0a004293c6abe8f7fe358c9_amadey_coinminer_elex_graphican_remcos_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-11_8c17d9e6a0a004293c6abe8f7fe358c9_amadey_coinminer_elex_graphican_remcos_rhadamanthys_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-11_8c17d9e6a0a004293c6abe8f7fe358c9_amadey_coinminer_elex_graphican_remcos_rhadamanthys_smoke-loader_stop
- Size 419KB
- SHA256 f7dd9b4f1d1d6d31a06464102e9f748e1d0ce92649c0bf39b2109bf221899517
- MD5 8c17d9e6a0a004293c6abe8f7fe358c9
- SHA1 532e0edaa94202e1dd4359b19f8009c1f9abaf29
- SHA512 9d24719aa25724278d0618830af0f44b947f3b3b5e8e8d3e58e122c120db34799cd1df49e09bcdbff067dd768422cde9f36e78351881828cddfbd42a8d1d711d
- SSDEEP 6144:oatygN+TkFSLZ+knaTDH76VFwcEOkCybEaQRXr9HNdvOa:oatG+S9+kaTDHrOkx2LIa
- TLSH T1C2948C19FAA08076C563857AC4E257A6FBB1B5223B109ACF639007565F237E3BD3530E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory