General
- Target 2026-07-28_39094fc1161183b37c3ec2a5a3c92a80_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop
- Size 395KB
- Sample260729-bvrkqs1gmc
- SHA256 cdec8330377031b2624d1893fae12edecd73f28201aab5c0018df60b63d1459f
- MD5 39094fc1161183b37c3ec2a5a3c92a80
- SHA1 fcc40077d5f41e7f11cdbff35d9e259245fb8401
- SHA512 f491b74ec458a17f668d5b25754c790c279bb6d53df5552760eab84a757bc3aafc8cf3812206fab22098ba5bea26c5be6637de5a18fb3ca768f8e0a250e1b580
- SSDEEP 6144:GWVrC1c2oonALgPLj7vfFLKlOIFGcEOkCybEaQRXr9HNdvOaxy8K:GkCO2zVPX7vfFLKlwOkx2LIaxy
- TLSH T1C0846B2AB6A0D036C4779574C4A257AAFFB1B42237204ACFA390475A1F237E2BD7531D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-28_39094fc1161183b37c3ec2a5a3c92a80_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-28_39094fc1161183b37c3ec2a5a3c92a80_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-28_39094fc1161183b37c3ec2a5a3c92a80_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop
- Size 395KB
- SHA256 cdec8330377031b2624d1893fae12edecd73f28201aab5c0018df60b63d1459f
- MD5 39094fc1161183b37c3ec2a5a3c92a80
- SHA1 fcc40077d5f41e7f11cdbff35d9e259245fb8401
- SHA512 f491b74ec458a17f668d5b25754c790c279bb6d53df5552760eab84a757bc3aafc8cf3812206fab22098ba5bea26c5be6637de5a18fb3ca768f8e0a250e1b580
- SSDEEP 6144:GWVrC1c2oonALgPLj7vfFLKlOIFGcEOkCybEaQRXr9HNdvOaxy8K:GkCO2zVPX7vfFLKlwOkx2LIaxy
- TLSH T1C0846B2AB6A0D036C4779574C4A257AAFFB1B42237204ACFA390475A1F237E2BD7531D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory