General
- Target 2026-08-09_b34e224a6e019b02eb1bd3548b487b96_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop
- Size 704KB
- Sample260809-a2k6vsga95
- SHA256 109aa9956181ddef653d2856e5a7b52a7c04ce83c143538439b4f84865f1b9ed
- MD5 b34e224a6e019b02eb1bd3548b487b96
- SHA1 6857304edca14d8002e48d774705479567659f3e
- SHA512 639c4929fb5c08bd94a7c97b8fba2614e25b242dc3d286fef08e34b4e4b90161c22bd8473014e407fb1ee1da5aa9fc2e1caa2e505a913939ed89c2943eda0115
- SSDEEP 12288:9SvO2x9mONvKRILSF/Okx2LIatyVuX13kdB4YSYVWd:cvO2xJKRI2dOkx2LFAAX1oOYSY8d
- TLSH T189E48B12F791C172C86746B488A7476EAA75BD1523204BCBE7907E5A8EB33D1BC3930D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-09_b34e224a6e019b02eb1bd3548b487b96_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_b34e224a6e019b02eb1bd3548b487b96_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_b34e224a6e019b02eb1bd3548b487b96_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop
- Size 704KB
- SHA256 109aa9956181ddef653d2856e5a7b52a7c04ce83c143538439b4f84865f1b9ed
- MD5 b34e224a6e019b02eb1bd3548b487b96
- SHA1 6857304edca14d8002e48d774705479567659f3e
- SHA512 639c4929fb5c08bd94a7c97b8fba2614e25b242dc3d286fef08e34b4e4b90161c22bd8473014e407fb1ee1da5aa9fc2e1caa2e505a913939ed89c2943eda0115
- SSDEEP 12288:9SvO2x9mONvKRILSF/Okx2LIatyVuX13kdB4YSYVWd:cvO2xJKRI2dOkx2LFAAX1oOYSY8d
- TLSH T189E48B12F791C172C86746B488A7476EAA75BD1523204BCBE7907E5A8EB33D1BC3930D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables packed with VMProtect.
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory