General
- Target 2026-07-29_2c978c2d428367d98007a3fb81ad7ce7_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop
- Size 395KB
- Sample260729-kghkca11cv
- SHA256 e88172a926c990e746d1cb764e48fe73a4a0c287d7c81ed23cfca9d3cd2a6b18
- MD5 2c978c2d428367d98007a3fb81ad7ce7
- SHA1 b27c8197be2bf5aa44d563f49ff7b7c6d066d974
- SHA512 bc2c2ac1dfebb0e47220e7e46ed39ddbc7904848b769658da6e61138fafa64fef62ba1b7b835478a358629dae9b052a437fd06936dd9c44d3f0904ab1102782c
- SSDEEP 6144:+WVrC1c2oonALgPLj7vfFLKlOIFGcEOkCybEaQRXr9HNdvOaxy8K:+kCO2zVPX7vfFLKlwOkx2LIaxy
- TLSH T16C846B2AB6A0D036C4779574C4A257AAFFB1B42237204ACFA390475A1F237E2BD7531D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-29_2c978c2d428367d98007a3fb81ad7ce7_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-29_2c978c2d428367d98007a3fb81ad7ce7_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-29_2c978c2d428367d98007a3fb81ad7ce7_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop
- Size 395KB
- SHA256 e88172a926c990e746d1cb764e48fe73a4a0c287d7c81ed23cfca9d3cd2a6b18
- MD5 2c978c2d428367d98007a3fb81ad7ce7
- SHA1 b27c8197be2bf5aa44d563f49ff7b7c6d066d974
- SHA512 bc2c2ac1dfebb0e47220e7e46ed39ddbc7904848b769658da6e61138fafa64fef62ba1b7b835478a358629dae9b052a437fd06936dd9c44d3f0904ab1102782c
- SSDEEP 6144:+WVrC1c2oonALgPLj7vfFLKlOIFGcEOkCybEaQRXr9HNdvOaxy8K:+kCO2zVPX7vfFLKlwOkx2LIaxy
- TLSH T16C846B2AB6A0D036C4779574C4A257AAFFB1B42237204ACFA390475A1F237E2BD7531D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory