General
- Target 2026-08-17_ef5e727fccbcba73bb7f907fd57de339_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop
- Size 704KB
- Sample260817-zyandszane
- SHA256 4554a5e507985595078247915e2b1b9b7b5250dc4390ad090d352e12245d6260
- MD5 ef5e727fccbcba73bb7f907fd57de339
- SHA1 7093c07913a6298b2908bfd0c219087621c31476
- SHA512 2fb07e46e5147c1a08e781aac0e8033f22776d115ff6c76c5a3a1fd293d29e8f676f07cc8c6f4ab95b57689de9b6f556d806e63a6cf626bdc4061650eb88d686
- SSDEEP 12288:4SvO2x9mONvKRILSF/Okx2LIatyVuX13kdB4YSYVWd:TvO2xJKRI2dOkx2LFAAX1oOYSY8d
- TLSH T1BCE48B12F791C172C86746B488A7476EAA75BD1523204BCBE7907E5A8EB33D1BC3930D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-17_ef5e727fccbcba73bb7f907fd57de339_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-17_ef5e727fccbcba73bb7f907fd57de339_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-17_ef5e727fccbcba73bb7f907fd57de339_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop
- Size 704KB
- SHA256 4554a5e507985595078247915e2b1b9b7b5250dc4390ad090d352e12245d6260
- MD5 ef5e727fccbcba73bb7f907fd57de339
- SHA1 7093c07913a6298b2908bfd0c219087621c31476
- SHA512 2fb07e46e5147c1a08e781aac0e8033f22776d115ff6c76c5a3a1fd293d29e8f676f07cc8c6f4ab95b57689de9b6f556d806e63a6cf626bdc4061650eb88d686
- SSDEEP 12288:4SvO2x9mONvKRILSF/Okx2LIatyVuX13kdB4YSYVWd:TvO2xJKRI2dOkx2LFAAX1oOYSY8d
- TLSH T1BCE48B12F791C172C86746B488A7476EAA75BD1523204BCBE7907E5A8EB33D1BC3930D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables packed with VMProtect.
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory