General
- Target 2026-08-13_e1f8fe3bd57a04a407c63d909c8a19b7_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop
- Size 704KB
- Sample260813-dk52gsywe1
- SHA256 af9598efe35ba39d5ec9de1df11943ea4c230ce700e9828f5d08761bacafe23e
- MD5 e1f8fe3bd57a04a407c63d909c8a19b7
- SHA1 827b69631247f7e3fd7b4830ac921e0461af917e
- SHA512 fc78b47dc14e79c7826c2a6a82f6b23e6b3dc84df8255e8efba4859e79eef8944f99760f02312b312adaebee67a143245e909c99530a42e5a863b87726878159
- SSDEEP 12288:NSvO2x9mONvKRILSF/Okx2LIatyVuX13kdB4YSYVWd:MvO2xJKRI2dOkx2LFAAX1oOYSY8d
- TLSH T135E48B12F791C172C86746B488A7476EAA75BD1523204BCBE7907E5A8EB33D1BC3930D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-13_e1f8fe3bd57a04a407c63d909c8a19b7_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-13_e1f8fe3bd57a04a407c63d909c8a19b7_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-13_e1f8fe3bd57a04a407c63d909c8a19b7_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop
- Size 704KB
- SHA256 af9598efe35ba39d5ec9de1df11943ea4c230ce700e9828f5d08761bacafe23e
- MD5 e1f8fe3bd57a04a407c63d909c8a19b7
- SHA1 827b69631247f7e3fd7b4830ac921e0461af917e
- SHA512 fc78b47dc14e79c7826c2a6a82f6b23e6b3dc84df8255e8efba4859e79eef8944f99760f02312b312adaebee67a143245e909c99530a42e5a863b87726878159
- SSDEEP 12288:NSvO2x9mONvKRILSF/Okx2LIatyVuX13kdB4YSYVWd:MvO2xJKRI2dOkx2LFAAX1oOYSY8d
- TLSH T135E48B12F791C172C86746B488A7476EAA75BD1523204BCBE7907E5A8EB33D1BC3930D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables packed with VMProtect.
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory