General
- Target 2026-08-02_3bf28bdfb06b15723605cf036594a3e0_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop
- Size 448KB
- Sample260802-ry17cabq6z
- SHA256 3af367bdace7b380cf474d81af0afe3f4970afa83a259578a63392eb078ad991
- MD5 3bf28bdfb06b15723605cf036594a3e0
- SHA1 5c563746ab87b1f531e44add964cada7fb928c21
- SHA512 5ca78de3c39aee89d57d3d5236ab97f7216451ce3ac06a4b0a31d8bd39f23d78e7fa17a603cfc268d2a0bb43f8de081ff4794280de6099a9e81e7cd57adb5151
- SSDEEP 6144:GcTgav1cdCTuoPbgwmOLJvKRILSFvdFDcEOkCybEaQRXr9HNdvOaxy8Kc5R+:GSvO2x9mONvKRILSFnOkx2LIaxya5E
- TLSH T1CBA46B26B6908036C4B78575C5F64BAAFAB1BC21631196CFA390365A1F737E2BD3130D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-02_3bf28bdfb06b15723605cf036594a3e0_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-02_3bf28bdfb06b15723605cf036594a3e0_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_3bf28bdfb06b15723605cf036594a3e0_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop
- Size 448KB
- SHA256 3af367bdace7b380cf474d81af0afe3f4970afa83a259578a63392eb078ad991
- MD5 3bf28bdfb06b15723605cf036594a3e0
- SHA1 5c563746ab87b1f531e44add964cada7fb928c21
- SHA512 5ca78de3c39aee89d57d3d5236ab97f7216451ce3ac06a4b0a31d8bd39f23d78e7fa17a603cfc268d2a0bb43f8de081ff4794280de6099a9e81e7cd57adb5151
- SSDEEP 6144:GcTgav1cdCTuoPbgwmOLJvKRILSFvdFDcEOkCybEaQRXr9HNdvOaxy8Kc5R+:GSvO2x9mONvKRILSFnOkx2LIaxya5E
- TLSH T1CBA46B26B6908036C4B78575C5F64BAAFAB1BC21631196CFA390365A1F737E2BD3130D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory