General
- Target 2026-08-20_e4feb9692a8c3f0a63acf2be0cca1d9a_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop
- Size 960KB
- Sample260820-2547paz1dv
- SHA256 c78122e17b6747957f20b5dcc033992d2b6b8a5a35bdac808a30178a7fbfb260
- MD5 e4feb9692a8c3f0a63acf2be0cca1d9a
- SHA1 685ce90c59832115ace6628c08ed5ee8539b2d0a
- SHA512 be5eb31493a70648eb92cc4297532763700bbfdf859c3817ec1ce2751410a93c5bfcf73e447a8cdae60df2f35f554baf459a3fef07d91a3b8fca82dbae1436c7
- SSDEEP 12288:BSvO2x9mONvKRILSFnOkx2LIaxy4n5FAQjU/u:IvO2xJKRI2FOkx2LFE4scU2
- TLSH T14F253B22F6508135C4B74536C5FA0BEAA6747D21671067CBA3C07B5B2FB36D2A931B0E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-20_e4feb9692a8c3f0a63acf2be0cca1d9a_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-20_e4feb9692a8c3f0a63acf2be0cca1d9a_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_e4feb9692a8c3f0a63acf2be0cca1d9a_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop
- Size 960KB
- SHA256 c78122e17b6747957f20b5dcc033992d2b6b8a5a35bdac808a30178a7fbfb260
- MD5 e4feb9692a8c3f0a63acf2be0cca1d9a
- SHA1 685ce90c59832115ace6628c08ed5ee8539b2d0a
- SHA512 be5eb31493a70648eb92cc4297532763700bbfdf859c3817ec1ce2751410a93c5bfcf73e447a8cdae60df2f35f554baf459a3fef07d91a3b8fca82dbae1436c7
- SSDEEP 12288:BSvO2x9mONvKRILSFnOkx2LIaxy4n5FAQjU/u:IvO2xJKRI2FOkx2LFE4scU2
- TLSH T14F253B22F6508135C4B74536C5FA0BEAA6747D21671067CBA3C07B5B2FB36D2A931B0E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory