General
- Target 2026-09-04_389ddfb2d78310574eec7d0e1677aff5_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop
- Size 419KB
- Sample260905-rdrr6sszet
- SHA256 b6d6ee9f8777b6c30c71a48188f6b66a7527ce370cbe985c1155316a2a44085d
- MD5 389ddfb2d78310574eec7d0e1677aff5
- SHA1 0627a52519adcf17e298db682c8950871487df66
- SHA512 1cd5d2158351519067e558c86aa30e55b145967b743fa26486cc990938a392083189d7f866f2503091f50854c973061f881061bdee9aadedd45d046b29d96975
- SSDEEP 6144:38a+AjLd9fSZLC/umZjqDvjZFXcEOkCybEaQRXr9HNdvOa:Ma+4EZe/uwqDvDOkx2LIa
- TLSH T1E3948D19FAA08036C5A38575C4A257A7FBB1752137209ACFA3A057561F237E3BD3630E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-04_389ddfb2d78310574eec7d0e1677aff5_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-04_389ddfb2d78310574eec7d0e1677aff5_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-04_389ddfb2d78310574eec7d0e1677aff5_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop
- Size 419KB
- SHA256 b6d6ee9f8777b6c30c71a48188f6b66a7527ce370cbe985c1155316a2a44085d
- MD5 389ddfb2d78310574eec7d0e1677aff5
- SHA1 0627a52519adcf17e298db682c8950871487df66
- SHA512 1cd5d2158351519067e558c86aa30e55b145967b743fa26486cc990938a392083189d7f866f2503091f50854c973061f881061bdee9aadedd45d046b29d96975
- SSDEEP 6144:38a+AjLd9fSZLC/umZjqDvjZFXcEOkCybEaQRXr9HNdvOa:Ma+4EZe/uwqDvDOkx2LIa
- TLSH T1E3948D19FAA08036C5A38575C4A257A7FBB1752137209ACFA3A057561F237E3BD3630E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory