General
- Target 2026-09-04_98cbacc8e53e6ed0837cad9e29f83289_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop
- Size 832KB
- Sample260905-c54tgsstcs
- SHA256 c3dee73631c5c94c23287a94ab2c4725a3721b720d3821ef0e5a790b5cb4e812
- MD5 98cbacc8e53e6ed0837cad9e29f83289
- SHA1 aac9e0eaf3f5c82e6df8ed962ee927f7504e10c6
- SHA512 668b2b489d3ff2341778c7daa6d07e66fb57c4f1c302413246061a48c6120764bed6c1c0591fe9bd528c922115557276410516e3085379d23c0dcd07b5c2330e
- SSDEEP 12288:qSvO2x9mONvKRILSFnOkx2LIaxy6RJ05FAQjU/LU:xvO2xJKRI2FOkx2LFEAcUY
- TLSH T1CE056C22F241C13AD4A7467185FE07ABA674BD10571257CBA3847B2A1FB36D2BE31B0D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-04_98cbacc8e53e6ed0837cad9e29f83289_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-04_98cbacc8e53e6ed0837cad9e29f83289_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-04_98cbacc8e53e6ed0837cad9e29f83289_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop
- Size 832KB
- SHA256 c3dee73631c5c94c23287a94ab2c4725a3721b720d3821ef0e5a790b5cb4e812
- MD5 98cbacc8e53e6ed0837cad9e29f83289
- SHA1 aac9e0eaf3f5c82e6df8ed962ee927f7504e10c6
- SHA512 668b2b489d3ff2341778c7daa6d07e66fb57c4f1c302413246061a48c6120764bed6c1c0591fe9bd528c922115557276410516e3085379d23c0dcd07b5c2330e
- SSDEEP 12288:qSvO2x9mONvKRILSFnOkx2LIaxy6RJ05FAQjU/LU:xvO2xJKRI2FOkx2LFEAcUY
- TLSH T1CE056C22F241C13AD4A7467185FE07ABA674BD10571257CBA3847B2A1FB36D2BE31B0D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory