General
- Target 2026-08-03_01b284d11db2b9a120b9a8b0e37186bc_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop
- Size 395KB
- Sample260803-pmjf2sxfla
- SHA256 17e66e9db90f9f5fb03a779cb5d79ff168d5836f64747c87293e54df92036afd
- MD5 01b284d11db2b9a120b9a8b0e37186bc
- SHA1 c44912a7cac307430d1b5e8b2ec3476e04c813dc
- SHA512 6a5a4e9c95da3bdbe03a77e10693672f1335536a76a3a3b0b36ac1977c7cb5bc4a20928bdfefd0408bce4d9bc84e74ef90ac50999572937a96ed0eae8354ddf6
- SSDEEP 6144:0WVrC1c2oonALgPLj7vfFLKlOIFGcEOkCybEaQRXr9HNdvOaxy8K:0kCO2zVPX7vfFLKlwOkx2LIaxy
- TLSH T198846B2AB6A0D036C4779574C4A257AAFFB1B42237204ACFA390475A1F237E2BD7531D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_01b284d11db2b9a120b9a8b0e37186bc_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_01b284d11db2b9a120b9a8b0e37186bc_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_01b284d11db2b9a120b9a8b0e37186bc_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop
- Size 395KB
- SHA256 17e66e9db90f9f5fb03a779cb5d79ff168d5836f64747c87293e54df92036afd
- MD5 01b284d11db2b9a120b9a8b0e37186bc
- SHA1 c44912a7cac307430d1b5e8b2ec3476e04c813dc
- SHA512 6a5a4e9c95da3bdbe03a77e10693672f1335536a76a3a3b0b36ac1977c7cb5bc4a20928bdfefd0408bce4d9bc84e74ef90ac50999572937a96ed0eae8354ddf6
- SSDEEP 6144:0WVrC1c2oonALgPLj7vfFLKlOIFGcEOkCybEaQRXr9HNdvOaxy8K:0kCO2zVPX7vfFLKlwOkx2LIaxy
- TLSH T198846B2AB6A0D036C4779574C4A257AAFFB1B42237204ACFA390475A1F237E2BD7531D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory