General
- Target 2026-08-03_ca401a81daed2406b74103665a0922d3_amadey_coinminer_elex_graphican_remcos_rhadamanthys_smoke-loader_stop
- Size 679KB
- Sample260803-fdjwsassas
- SHA256 054b09135adbb20b395908151602f59708bed2d850588f1f28602a83846d1b97
- MD5 ca401a81daed2406b74103665a0922d3
- SHA1 906464268921e028fe67791f8f9c41f09c5e793d
- SHA512 a90ce819743da0f4a9d91543a9c45f71eb62c5dc23b6d2e1d932229f9188894c52b65f8cc11caf5ad4f2c5cebe985009bcf18b87f7d85b0e49d3353c0ffcb037
- SSDEEP 12288:tSvO2x9mONvKRILSFnOkx2LIaxya5FAQjU/Lik8CQ3K:svO2xJKRI2FOkx2LFEvcUQPK
- TLSH T11DE45A31E641C036D4A74576C6FA0BBFE964BD25131165CBA3C43A262FB36D2BA3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_ca401a81daed2406b74103665a0922d3_amadey_coinminer_elex_graphican_remcos_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_ca401a81daed2406b74103665a0922d3_amadey_coinminer_elex_graphican_remcos_rhadamanthys_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_ca401a81daed2406b74103665a0922d3_amadey_coinminer_elex_graphican_remcos_rhadamanthys_smoke-loader_stop
- Size 679KB
- SHA256 054b09135adbb20b395908151602f59708bed2d850588f1f28602a83846d1b97
- MD5 ca401a81daed2406b74103665a0922d3
- SHA1 906464268921e028fe67791f8f9c41f09c5e793d
- SHA512 a90ce819743da0f4a9d91543a9c45f71eb62c5dc23b6d2e1d932229f9188894c52b65f8cc11caf5ad4f2c5cebe985009bcf18b87f7d85b0e49d3353c0ffcb037
- SSDEEP 12288:tSvO2x9mONvKRILSFnOkx2LIaxya5FAQjU/Lik8CQ3K:svO2xJKRI2FOkx2LFEvcUQPK
- TLSH T11DE45A31E641C036D4A74576C6FA0BBFE964BD25131165CBA3C43A262FB36D2BA3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory