General
- Target 2026-07-27_6d339c3798d88f5c31e1e5c3c92d3ba8_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop
- Size 395KB
- Sample260727-hf97vsxdkg
- SHA256 e927f6a3820befcd0c655655d9a517d9621eb21dbc83a594d349d1f20192b3bf
- MD5 6d339c3798d88f5c31e1e5c3c92d3ba8
- SHA1 b2798ce7ac4969f2c90d084528d65d384086a583
- SHA512 e34abc206339af60b7b6e53a5884b4120f1f1bfe275b919ad2ae801da56fb5a8e7906e4cecc27a5a8b0046efc4ba31838087e3d2785b091c19bddce5c5b36ed2
- SSDEEP 6144:IWVrC1c2oonALgPLj7vfFLKlOIFGcEOkCybEaQRXr9HNdvOaxy8K:IkCO2zVPX7vfFLKlwOkx2LIaxy
- TLSH T13B846B2AB6A0D036C4779574C4A257AAFFB1B42237204ACFA390475A1F237E2BD7531D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-27_6d339c3798d88f5c31e1e5c3c92d3ba8_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-27_6d339c3798d88f5c31e1e5c3c92d3ba8_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-27_6d339c3798d88f5c31e1e5c3c92d3ba8_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop
- Size 395KB
- SHA256 e927f6a3820befcd0c655655d9a517d9621eb21dbc83a594d349d1f20192b3bf
- MD5 6d339c3798d88f5c31e1e5c3c92d3ba8
- SHA1 b2798ce7ac4969f2c90d084528d65d384086a583
- SHA512 e34abc206339af60b7b6e53a5884b4120f1f1bfe275b919ad2ae801da56fb5a8e7906e4cecc27a5a8b0046efc4ba31838087e3d2785b091c19bddce5c5b36ed2
- SSDEEP 6144:IWVrC1c2oonALgPLj7vfFLKlOIFGcEOkCybEaQRXr9HNdvOaxy8K:IkCO2zVPX7vfFLKlwOkx2LIaxy
- TLSH T13B846B2AB6A0D036C4779574C4A257AAFFB1B42237204ACFA390475A1F237E2BD7531D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory