General
- Target 2026-08-19_c7c8fad48dc629e160f268ce1775f3a2_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop
- Size 395KB
- Sample260819-e1epxada22
- SHA256 224a686da202dc44c215e2fc3ec617ee4d151648afd49f17593cc25eb3fc9105
- MD5 c7c8fad48dc629e160f268ce1775f3a2
- SHA1 7589ec8b7f54cb97c031d7983a82ab35fa1ce5c8
- SHA512 8e962317dabde6e89816beb337642f52e90fc6483de24794bdc5587b8444a51444b78a650bdc6032a869eb7a759c039f71d30087be4c8d0ab4c72d7fcefbf428
- SSDEEP 6144:GwdK91cVMoSTZu05LOY0ftLy+mgFScEOkCybEaQRXr9HNdvOaxy8K:Gn9OVKk05aY0ftLy+MOkx2LIaxy
- TLSH T1D1846D2AF6A0D076C4B79578C49257A6FBB1742137204ACFA390475A1F637E2BE3630D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-19_c7c8fad48dc629e160f268ce1775f3a2_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-19_c7c8fad48dc629e160f268ce1775f3a2_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-19_c7c8fad48dc629e160f268ce1775f3a2_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop
- Size 395KB
- SHA256 224a686da202dc44c215e2fc3ec617ee4d151648afd49f17593cc25eb3fc9105
- MD5 c7c8fad48dc629e160f268ce1775f3a2
- SHA1 7589ec8b7f54cb97c031d7983a82ab35fa1ce5c8
- SHA512 8e962317dabde6e89816beb337642f52e90fc6483de24794bdc5587b8444a51444b78a650bdc6032a869eb7a759c039f71d30087be4c8d0ab4c72d7fcefbf428
- SSDEEP 6144:GwdK91cVMoSTZu05LOY0ftLy+mgFScEOkCybEaQRXr9HNdvOaxy8K:Gn9OVKk05aY0ftLy+MOkx2LIaxy
- TLSH T1D1846D2AF6A0D076C4B79578C49257A6FBB1742137204ACFA390475A1F637E2BE3630D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory