General
- Target 2026-08-04_3fbd0aa7679115a32956f7f1ded90c48_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop
- Size 395KB
- Sample260804-th496sdc95
- SHA256 44e6ed61bc2086d56a64a3cba97baf2ce87694d02a10f1744bc630e727cb8d99
- MD5 3fbd0aa7679115a32956f7f1ded90c48
- SHA1 a11c7595790a1c4f3602bd73f6fe17c5fd924426
- SHA512 aa4bea24cbab8a210ff6713ebe9ebb8fbe915f9ad29798b8637b74c72732fc3e6bc380035e91bd44ff2a311c8fea5468d70c6af97749a3bb1ccab6fc6ddfb09f
- SSDEEP 6144:rWVrC1c2oonALgPLj7vfFLKlOIFGcEOkCybEaQRXr9HNdvOaxy8K:rkCO2zVPX7vfFLKlwOkx2LIaxy
- TLSH T1BE846B2AB6A0D036C4779574C4A257AAFFB1B42237204ACFA390475A1F237E2BD7531D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-04_3fbd0aa7679115a32956f7f1ded90c48_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-04_3fbd0aa7679115a32956f7f1ded90c48_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_3fbd0aa7679115a32956f7f1ded90c48_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop
- Size 395KB
- SHA256 44e6ed61bc2086d56a64a3cba97baf2ce87694d02a10f1744bc630e727cb8d99
- MD5 3fbd0aa7679115a32956f7f1ded90c48
- SHA1 a11c7595790a1c4f3602bd73f6fe17c5fd924426
- SHA512 aa4bea24cbab8a210ff6713ebe9ebb8fbe915f9ad29798b8637b74c72732fc3e6bc380035e91bd44ff2a311c8fea5468d70c6af97749a3bb1ccab6fc6ddfb09f
- SSDEEP 6144:rWVrC1c2oonALgPLj7vfFLKlOIFGcEOkCybEaQRXr9HNdvOaxy8K:rkCO2zVPX7vfFLKlwOkx2LIaxy
- TLSH T1BE846B2AB6A0D036C4779574C4A257AAFFB1B42237204ACFA390475A1F237E2BD7531D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory