General
- Target 2026-08-04_328570911168463052782666d2fc26dc_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop
- Size 419KB
- Sample260804-jm9qcafe73
- SHA256 ba4c3f3e3417a21d8c4a1dfd13644426ad923be59ae3491660f5d13973728319
- MD5 328570911168463052782666d2fc26dc
- SHA1 e4611088385bcd5a1170b4dad1fb80483427a450
- SHA512 4c9841330cdd70391a165dd186c9301eb3eb73da99cc370fc095c048a85744dbe627f083fd5524da6d93b02db02daf833c07106b996803c60637963073c01dfc
- SSDEEP 6144:r8a+AjLd9fSZLC/umZjqDvjZFXcEOkCybEaQRXr9HNdvOa:Ia+4EZe/uwqDvDOkx2LIa
- TLSH T1C2948D19FAA08036C5A38575C4A257A7FBB1752137209ACFA3A057561F237E3BD3630E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-04_328570911168463052782666d2fc26dc_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-04_328570911168463052782666d2fc26dc_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_328570911168463052782666d2fc26dc_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop
- Size 419KB
- SHA256 ba4c3f3e3417a21d8c4a1dfd13644426ad923be59ae3491660f5d13973728319
- MD5 328570911168463052782666d2fc26dc
- SHA1 e4611088385bcd5a1170b4dad1fb80483427a450
- SHA512 4c9841330cdd70391a165dd186c9301eb3eb73da99cc370fc095c048a85744dbe627f083fd5524da6d93b02db02daf833c07106b996803c60637963073c01dfc
- SSDEEP 6144:r8a+AjLd9fSZLC/umZjqDvjZFXcEOkCybEaQRXr9HNdvOa:Ia+4EZe/uwqDvDOkx2LIa
- TLSH T1C2948D19FAA08036C5A38575C4A257A7FBB1752137209ACFA3A057561F237E3BD3630E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory