General
- Target 2026-08-04_73fcedc3edccfcd83a9c895044c27ada_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop
- Size 395KB
- Sample260804-hk1tzstckf
- SHA256 1724b81bc0bb29b34747d14826c1d33fdd176690a754a6011ff182c05ceb6c96
- MD5 73fcedc3edccfcd83a9c895044c27ada
- SHA1 55a6a2c4921074ca3b8e1c85e65f201d554f65dc
- SHA512 071408204eec603b10a047dc86c61d3e0ecdc0e13c92bf771120ce40638358a0d734212277e8c2bc4212e0a7fdb5af831efb59d270d7801b794021bd7f470281
- SSDEEP 6144:oWVrC1c2oonALgPLj7vfFLKlOIFGcEOkCybEaQRXr9HNdvOaxy8K:okCO2zVPX7vfFLKlwOkx2LIaxy
- TLSH T195846B2AB6A0D036C4779574C4A257AAFFB1B42237204ACFA390475A1F237E2BD7531D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-04_73fcedc3edccfcd83a9c895044c27ada_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-04_73fcedc3edccfcd83a9c895044c27ada_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_73fcedc3edccfcd83a9c895044c27ada_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop
- Size 395KB
- SHA256 1724b81bc0bb29b34747d14826c1d33fdd176690a754a6011ff182c05ceb6c96
- MD5 73fcedc3edccfcd83a9c895044c27ada
- SHA1 55a6a2c4921074ca3b8e1c85e65f201d554f65dc
- SHA512 071408204eec603b10a047dc86c61d3e0ecdc0e13c92bf771120ce40638358a0d734212277e8c2bc4212e0a7fdb5af831efb59d270d7801b794021bd7f470281
- SSDEEP 6144:oWVrC1c2oonALgPLj7vfFLKlOIFGcEOkCybEaQRXr9HNdvOaxy8K:okCO2zVPX7vfFLKlwOkx2LIaxy
- TLSH T195846B2AB6A0D036C4779574C4A257AAFFB1B42237204ACFA390475A1F237E2BD7531D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory