General
- Target 2026-08-21_491f59fd5ee03f0a9ac4c4f26672e15c_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop
- Size 448KB
- Sample260821-cbfvkazhpf
- SHA256 dc9f7a7ee456d9f6806a7ab9f8de99024ccc1902fe572031afbaa6fffe441dc0
- MD5 491f59fd5ee03f0a9ac4c4f26672e15c
- SHA1 54295113b4fbe900e43deaf32b25a64e4e15886c
- SHA512 89a325a1887dfdf713821035869ce33198462b9d8135db67514ea61fc318e4d1f1b84f9c74e87050b502b084acead8d40f22080e235adea40ca978d06de666c4
- SSDEEP 6144:ncTgav1cdCTuoPbgwmOLJvKRILSFvdFbcEOkCybEaQRXr9HNdvOaty8KRpPUM:nSvO2x9mONvKRILSF/Okx2LIatyD
- TLSH T104A45C26B7909076C4B78674C8A247AAFBB1BC2127118B8FA39077191F73792BD3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-21_491f59fd5ee03f0a9ac4c4f26672e15c_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-21_491f59fd5ee03f0a9ac4c4f26672e15c_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-21_491f59fd5ee03f0a9ac4c4f26672e15c_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop
- Size 448KB
- SHA256 dc9f7a7ee456d9f6806a7ab9f8de99024ccc1902fe572031afbaa6fffe441dc0
- MD5 491f59fd5ee03f0a9ac4c4f26672e15c
- SHA1 54295113b4fbe900e43deaf32b25a64e4e15886c
- SHA512 89a325a1887dfdf713821035869ce33198462b9d8135db67514ea61fc318e4d1f1b84f9c74e87050b502b084acead8d40f22080e235adea40ca978d06de666c4
- SSDEEP 6144:ncTgav1cdCTuoPbgwmOLJvKRILSFvdFbcEOkCybEaQRXr9HNdvOaty8KRpPUM:nSvO2x9mONvKRILSF/Okx2LIatyD
- TLSH T104A45C26B7909076C4B78674C8A247AAFBB1BC2127118B8FA39077191F73792BD3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory