General
- Target 2026-08-22_c462a5bd83ec12a521dd83e65cf03721_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop
- Size 643KB
- Sample260823-a73cbswtfx
- SHA256 636d0217c57026d597b013078c2dd0b2d2caefa95a33bac1075eb0feda624dfb
- MD5 c462a5bd83ec12a521dd83e65cf03721
- SHA1 5064639163288164089ee32c713b870edb62c161
- SHA512 42a39b977fbe2ffa9dbf3342b975bfa0e6474debb82e79e00c32d3396747aebdafdea0994f6c9f79fbeb813b5055ecb7b282dca0c67cb83cb077ebab7d0edf93
- SSDEEP 12288:2SvO2x9mONvKRILSFnOkx2LIaxya5FAQjU/Likg:1vO2xJKRI2FOkx2LFEvcU0
- TLSH T118E45A31E241C03AD4A74576C6FA0BBFE9647D25531165CBA3C43A262FB36D2BA3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-22_c462a5bd83ec12a521dd83e65cf03721_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-22_c462a5bd83ec12a521dd83e65cf03721_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-22_c462a5bd83ec12a521dd83e65cf03721_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop
- Size 643KB
- SHA256 636d0217c57026d597b013078c2dd0b2d2caefa95a33bac1075eb0feda624dfb
- MD5 c462a5bd83ec12a521dd83e65cf03721
- SHA1 5064639163288164089ee32c713b870edb62c161
- SHA512 42a39b977fbe2ffa9dbf3342b975bfa0e6474debb82e79e00c32d3396747aebdafdea0994f6c9f79fbeb813b5055ecb7b282dca0c67cb83cb077ebab7d0edf93
- SSDEEP 12288:2SvO2x9mONvKRILSFnOkx2LIaxya5FAQjU/Likg:1vO2xJKRI2FOkx2LFEvcU0
- TLSH T118E45A31E241C03AD4A74576C6FA0BBFE9647D25531165CBA3C43A262FB36D2BA3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory