General
- Target 2026-09-08_ab29cf8f31216045eb4a46281ce781d4_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop
- Size 547KB
- Sample260910-d4gs1awcmg
- SHA256 519a333c3058b051f940fd85f421c29b222e374422df0e8e8adc8ecb03ff74c8
- MD5 ab29cf8f31216045eb4a46281ce781d4
- SHA1 a69285b8752368e99ca7723a189a216a541dc899
- SHA512 f3a6322eb3cab565dc8769a5ffee0872b2af6f9d6993e7fb890f536a12c91047d62288f6dc5f4857c8335e66a8fb0bd07be2039e77c3c0d27de00edb0ef7678e
- SSDEEP 6144:ecTgav1cdCTuoPbgwmOLJvKRILSFvdFDcEOkCybEaQRXr9HNdvOaxy8KARG3:eSvO2x9mONvKRILSFnOkx2LIaxy6RY
- TLSH T1CAC47C27B6908236C4778675C4E647A6FBB5B511BB228B8F675083190F237D3BE21B1C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-08_ab29cf8f31216045eb4a46281ce781d4_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-08_ab29cf8f31216045eb4a46281ce781d4_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-08_ab29cf8f31216045eb4a46281ce781d4_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop
- Size 547KB
- SHA256 519a333c3058b051f940fd85f421c29b222e374422df0e8e8adc8ecb03ff74c8
- MD5 ab29cf8f31216045eb4a46281ce781d4
- SHA1 a69285b8752368e99ca7723a189a216a541dc899
- SHA512 f3a6322eb3cab565dc8769a5ffee0872b2af6f9d6993e7fb890f536a12c91047d62288f6dc5f4857c8335e66a8fb0bd07be2039e77c3c0d27de00edb0ef7678e
- SSDEEP 6144:ecTgav1cdCTuoPbgwmOLJvKRILSFvdFDcEOkCybEaQRXr9HNdvOaxy8KARG3:eSvO2x9mONvKRILSFnOkx2LIaxy6RY
- TLSH T1CAC47C27B6908236C4778675C4E647A6FBB5B511BB228B8F675083190F237D3BE21B1C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory