General
- Target 2026-09-06_d345c577397c29e29f642bb5360ab26d_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop
- Size 643KB
- Sample260906-vsvn6ayeld
- SHA256 1db60a83dc9d9a2fccedc0072f2c708eb15693faf813550ace9e6fd2971b3ccc
- MD5 d345c577397c29e29f642bb5360ab26d
- SHA1 f00ec277acbdcdbbdcd340ceb9dbbcddd713c31b
- SHA512 ac6f4120df7587f6720c1afabb1505c44ce1305c4439ab2380f0afc5ed6934456d916282a55b748e7448b4201d475f4eff5ffbd3426769d04993d68b2ee5d0d5
- SSDEEP 12288:lSvO2x9mONvKRILSFnOkx2LIaxya5FAQjU/Likg:EvO2xJKRI2FOkx2LFEvcU0
- TLSH T103E45A31E241C03AD4A74576C6FA0BBFE9647D25531165CBA3C43A262FB36D2BA3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-06_d345c577397c29e29f642bb5360ab26d_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-06_d345c577397c29e29f642bb5360ab26d_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-06_d345c577397c29e29f642bb5360ab26d_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop
- Size 643KB
- SHA256 1db60a83dc9d9a2fccedc0072f2c708eb15693faf813550ace9e6fd2971b3ccc
- MD5 d345c577397c29e29f642bb5360ab26d
- SHA1 f00ec277acbdcdbbdcd340ceb9dbbcddd713c31b
- SHA512 ac6f4120df7587f6720c1afabb1505c44ce1305c4439ab2380f0afc5ed6934456d916282a55b748e7448b4201d475f4eff5ffbd3426769d04993d68b2ee5d0d5
- SSDEEP 12288:lSvO2x9mONvKRILSFnOkx2LIaxya5FAQjU/Likg:EvO2xJKRI2FOkx2LFEvcU0
- TLSH T103E45A31E241C03AD4A74576C6FA0BBFE9647D25531165CBA3C43A262FB36D2BA3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory