General
- Target 2026-09-06_d6946a9dffb1d64950ddb66345fc1562_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop
- Size 548KB
- Sample260906-vhdynawxhs
- SHA256 5aef2952ea29a0dea93ce32ae73dedef539ac7b62772caf3e01b956862f9ac91
- MD5 d6946a9dffb1d64950ddb66345fc1562
- SHA1 7c84a29e14869891e8ca78157b340f6380244b63
- SHA512 2710a53487cc3f14eba52b71e39eada0cf8254a7350f88edc2d74c1621dbf1a8f168e486940bdbfe49364a871ee048283bdb89ac2a9196af01f386276e9544eb
- SSDEEP 12288:+kbOgbKcMoxy9RLW3uqXUHkUXe39+Okx2LIa:HbOgbEqy9RKejHPOwOkx2LF
- TLSH T1B9C4AE26F6A0C032C4B79574C4A34AAAFBB1742167204ACFA395475A1F737E2BE3531D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-09-06_d6946a9dffb1d64950ddb66345fc1562_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-06_d6946a9dffb1d64950ddb66345fc1562_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-06_d6946a9dffb1d64950ddb66345fc1562_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop
- Size 548KB
- SHA256 5aef2952ea29a0dea93ce32ae73dedef539ac7b62772caf3e01b956862f9ac91
- MD5 d6946a9dffb1d64950ddb66345fc1562
- SHA1 7c84a29e14869891e8ca78157b340f6380244b63
- SHA512 2710a53487cc3f14eba52b71e39eada0cf8254a7350f88edc2d74c1621dbf1a8f168e486940bdbfe49364a871ee048283bdb89ac2a9196af01f386276e9544eb
- SSDEEP 12288:+kbOgbKcMoxy9RLW3uqXUHkUXe39+Okx2LIa:HbOgbEqy9RKejHPOwOkx2LF
- TLSH T1B9C4AE26F6A0C032C4B79574C4A34AAAFBB1742167204ACFA395475A1F737E2BE3531D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory