General
- Target 2026-09-08_f477e0af0e6865bd5b8e9dc3470ed439_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop
- Size 832KB
- Sample260910-b2dx8avzhv
- SHA256 61cf541bdfecfecfbac8eb4071387e6578b0764d31382a97ba37f9b548e54ea6
- MD5 f477e0af0e6865bd5b8e9dc3470ed439
- SHA1 b657c994f759a1e8f99b1e68e02b99c9ed866ddb
- SHA512 aba6103c7b9cefa5aed7d546cb0829dc9811b244840ee55a0b740abf7fd9a783755c945566c089a7f167afd8d5d07252a4c593f572930d355e0348095351f318
- SSDEEP 12288:pSvO2x9mONvKRILSFnOkx2LIaxy6RJ05FAQjU/LU:QvO2xJKRI2FOkx2LFEAcUY
- TLSH T19D056C22F241C13AD4A7467185FE07ABA674BD10571257CBA3847B2A1FB36D2BE31B0D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-08_f477e0af0e6865bd5b8e9dc3470ed439_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-08_f477e0af0e6865bd5b8e9dc3470ed439_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-08_f477e0af0e6865bd5b8e9dc3470ed439_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop
- Size 832KB
- SHA256 61cf541bdfecfecfbac8eb4071387e6578b0764d31382a97ba37f9b548e54ea6
- MD5 f477e0af0e6865bd5b8e9dc3470ed439
- SHA1 b657c994f759a1e8f99b1e68e02b99c9ed866ddb
- SHA512 aba6103c7b9cefa5aed7d546cb0829dc9811b244840ee55a0b740abf7fd9a783755c945566c089a7f167afd8d5d07252a4c593f572930d355e0348095351f318
- SSDEEP 12288:pSvO2x9mONvKRILSFnOkx2LIaxy6RJ05FAQjU/LU:QvO2xJKRI2FOkx2LFEAcUY
- TLSH T19D056C22F241C13AD4A7467185FE07ABA674BD10571257CBA3847B2A1FB36D2BE31B0D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory