General
- Target 2026-08-03_a7afbbfa9da61d78f67f020d153c78c0_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop
- Size 547KB
- Sample260803-nededshn41
- SHA256 d1519c28a6bf1b79e1d8cb0a9986a951a40b640be457862fcbfe15d2e9b3ed16
- MD5 a7afbbfa9da61d78f67f020d153c78c0
- SHA1 9f2389e3e27251c4269679413ab5f1f1220fd7cf
- SHA512 4d2e1fc11f8a7a65816bc18e1afc793109ccd176e265a76c98f8e1df00d7de81f4af34a943ca15d3864c5d516cd2a3b065450b7b23467383b5a09602450e8d43
- SSDEEP 6144:BcTgav1cdCTuoPbgwmOLJvKRILSFvdFDcEOkCybEaQRXr9HNdvOaxy8KARG3:BSvO2x9mONvKRILSFnOkx2LIaxy6RY
- TLSH T142C47C27B6908236C4778675C4E647A6FBB5B511BB228B8F675083190F237D3BE21B1C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_a7afbbfa9da61d78f67f020d153c78c0_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_a7afbbfa9da61d78f67f020d153c78c0_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_a7afbbfa9da61d78f67f020d153c78c0_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop
- Size 547KB
- SHA256 d1519c28a6bf1b79e1d8cb0a9986a951a40b640be457862fcbfe15d2e9b3ed16
- MD5 a7afbbfa9da61d78f67f020d153c78c0
- SHA1 9f2389e3e27251c4269679413ab5f1f1220fd7cf
- SHA512 4d2e1fc11f8a7a65816bc18e1afc793109ccd176e265a76c98f8e1df00d7de81f4af34a943ca15d3864c5d516cd2a3b065450b7b23467383b5a09602450e8d43
- SSDEEP 6144:BcTgav1cdCTuoPbgwmOLJvKRILSFvdFDcEOkCybEaQRXr9HNdvOaxy8KARG3:BSvO2x9mONvKRILSFnOkx2LIaxy6RY
- TLSH T142C47C27B6908236C4778675C4E647A6FBB5B511BB228B8F675083190F237D3BE21B1C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory