General
- Target 2026-09-01_67db5c65523da8e40ecb905e3493e272_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop
- Size 1024KB
- Sample260903-mnmtrafl6z
- SHA256 31a50b3801052f14ef3a3df9fe03a1b67136064da9c48b6f461b344227249c21
- MD5 67db5c65523da8e40ecb905e3493e272
- SHA1 ddcd1b8a8ecdb5db2eb4cd5dc1c41498c0941334
- SHA512 554614c1fcce308a490b489f49ddb98272ced087d9b33c407299160849d51fc0094a0e97aee2829c2acde1fa1d2b61c0e2a0a07c161b54b78ac63db05a62c332
- SSDEEP 12288:9SvO2x9mONvKRILSFnOkx2LIaxy4n5FAQjU/Likr:cvO2xJKRI2FOkx2LFE4scUv
- TLSH T16D254A21F2508135D4B74975C5FA0BEAAA747D21571067CBA3C07A2B2FB36D2B931B0E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-01_67db5c65523da8e40ecb905e3493e272_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-01_67db5c65523da8e40ecb905e3493e272_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-01_67db5c65523da8e40ecb905e3493e272_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop
- Size 1024KB
- SHA256 31a50b3801052f14ef3a3df9fe03a1b67136064da9c48b6f461b344227249c21
- MD5 67db5c65523da8e40ecb905e3493e272
- SHA1 ddcd1b8a8ecdb5db2eb4cd5dc1c41498c0941334
- SHA512 554614c1fcce308a490b489f49ddb98272ced087d9b33c407299160849d51fc0094a0e97aee2829c2acde1fa1d2b61c0e2a0a07c161b54b78ac63db05a62c332
- SSDEEP 12288:9SvO2x9mONvKRILSFnOkx2LIaxy4n5FAQjU/Likr:cvO2xJKRI2FOkx2LFE4scUv
- TLSH T16D254A21F2508135D4B74975C5FA0BEAAA747D21571067CBA3C07A2B2FB36D2B931B0E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory