General
- Target 2026-07-15_f5bb15088e6d4963c93efc490e22ff68_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop
- Size 448KB
- Sample260715-grlszafy2x
- SHA256 9e557307cec831e01fef875fff593cb52c41eb05395dd6e8602d1a8039118351
- MD5 f5bb15088e6d4963c93efc490e22ff68
- SHA1 fa93045ea320006637f1b3e3896423f8b9a972cf
- SHA512 2884a5fb0c3cf423f1130a0412f29b73848d09a5041aa3fec00202f17bb1dffc97dd4381fd05f8e5dc8fced8227ceddb42499bddcf0f5dc96fa74ead2364c469
- SSDEEP 6144:9cTgav1cdCTuoPbgwmOLJvKRILSFvdFbcEOkCybEaQRXr9HNdvOaty8KRpPUM:9SvO2x9mONvKRILSF/Okx2LIatyD
- TLSH T125A45C26B7909076C4B78674C8A247AAFBB1BC2127118B8FA39077191F73792BD3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-15_f5bb15088e6d4963c93efc490e22ff68_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-15_f5bb15088e6d4963c93efc490e22ff68_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-15_f5bb15088e6d4963c93efc490e22ff68_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop
- Size 448KB
- SHA256 9e557307cec831e01fef875fff593cb52c41eb05395dd6e8602d1a8039118351
- MD5 f5bb15088e6d4963c93efc490e22ff68
- SHA1 fa93045ea320006637f1b3e3896423f8b9a972cf
- SHA512 2884a5fb0c3cf423f1130a0412f29b73848d09a5041aa3fec00202f17bb1dffc97dd4381fd05f8e5dc8fced8227ceddb42499bddcf0f5dc96fa74ead2364c469
- SSDEEP 6144:9cTgav1cdCTuoPbgwmOLJvKRILSFvdFbcEOkCybEaQRXr9HNdvOaty8KRpPUM:9SvO2x9mONvKRILSF/Okx2LIatyD
- TLSH T125A45C26B7909076C4B78674C8A247AAFBB1BC2127118B8FA39077191F73792BD3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory