General
- Target 2026-09-07_2fde1925909c2afd94cc14018f5aaa5e_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop
- Size 419KB
- Sample260909-e2t6zsbl8x
- SHA256 a81c07a54aab933afbcf3a8ef77b56fbd667b4ceb0958eb620c4c1a3836ff731
- MD5 2fde1925909c2afd94cc14018f5aaa5e
- SHA1 69be5cb7dc694803e8565d680fa22bb158342518
- SHA512 9167ced68c55d01000a1f9bc399198d58fd5faac721662944da84ee36e5fd90b4993c74d420880ddddb870855d7cee5401d87322773b8f6d8be957aa11f92300
- SSDEEP 6144:t8a+AjLd9fSZLC/umZjqDvjZFXcEOkCybEaQRXr9HNdvOa:+a+4EZe/uwqDvDOkx2LIa
- TLSH T165948D19FAA08036C5A38575C4A257A7FBB1752137209ACFA3A057561F237E3BD3630E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-07_2fde1925909c2afd94cc14018f5aaa5e_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-07_2fde1925909c2afd94cc14018f5aaa5e_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-07_2fde1925909c2afd94cc14018f5aaa5e_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop
- Size 419KB
- SHA256 a81c07a54aab933afbcf3a8ef77b56fbd667b4ceb0958eb620c4c1a3836ff731
- MD5 2fde1925909c2afd94cc14018f5aaa5e
- SHA1 69be5cb7dc694803e8565d680fa22bb158342518
- SHA512 9167ced68c55d01000a1f9bc399198d58fd5faac721662944da84ee36e5fd90b4993c74d420880ddddb870855d7cee5401d87322773b8f6d8be957aa11f92300
- SSDEEP 6144:t8a+AjLd9fSZLC/umZjqDvjZFXcEOkCybEaQRXr9HNdvOa:+a+4EZe/uwqDvDOkx2LIa
- TLSH T165948D19FAA08036C5A38575C4A257A7FBB1752137209ACFA3A057561F237E3BD3630E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory