General
- Target 2026-08-18_cb09e2f393fd6bbf2e94b9c83df4ec68_amadey_coinminer_elex_graphican_remcos_rhadamanthys_smoke-loader_stop
- Size 419KB
- Sample260819-ctz16aveqe
- SHA256 843334c6303caca567a0311d6b7b595ca957795d08929752dee858e42962a675
- MD5 cb09e2f393fd6bbf2e94b9c83df4ec68
- SHA1 dc361e9c358e31c8dd23888d722e394cd85dca07
- SHA512 9b1df9b5fed674ee357cc0f8cf24d90b98116b5d03f8dbec656513ba9583656c8eb433d27fe9ca80f6e1ce303fab53cb0bcef2c67ef9ba03b09309565cd471f2
- SSDEEP 6144:YatygN+TkFSLZ+knaTDH76VFwcEOkCybEaQRXr9HNdvOa:YatG+S9+kaTDHrOkx2LIa
- TLSH T11B948C19FAA08076C563857AC4E257A6FBB1B5223B109ACF639007565F237E3BD3530E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-18_cb09e2f393fd6bbf2e94b9c83df4ec68_amadey_coinminer_elex_graphican_remcos_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-18_cb09e2f393fd6bbf2e94b9c83df4ec68_amadey_coinminer_elex_graphican_remcos_rhadamanthys_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-18_cb09e2f393fd6bbf2e94b9c83df4ec68_amadey_coinminer_elex_graphican_remcos_rhadamanthys_smoke-loader_stop
- Size 419KB
- SHA256 843334c6303caca567a0311d6b7b595ca957795d08929752dee858e42962a675
- MD5 cb09e2f393fd6bbf2e94b9c83df4ec68
- SHA1 dc361e9c358e31c8dd23888d722e394cd85dca07
- SHA512 9b1df9b5fed674ee357cc0f8cf24d90b98116b5d03f8dbec656513ba9583656c8eb433d27fe9ca80f6e1ce303fab53cb0bcef2c67ef9ba03b09309565cd471f2
- SSDEEP 6144:YatygN+TkFSLZ+knaTDH76VFwcEOkCybEaQRXr9HNdvOa:YatG+S9+kaTDHrOkx2LIa
- TLSH T11B948C19FAA08076C563857AC4E257A6FBB1B5223B109ACF639007565F237E3BD3530E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory