General
- Target 2026-09-08_a4bbc1778942cd153b96dfe820bb40fd_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop
- Size 832KB
- Sample260910-d8hwvsytcv
- SHA256 e46e93624bf809276f59293d307b99a95c738b1816ab050349f4b3ae93544c6b
- MD5 a4bbc1778942cd153b96dfe820bb40fd
- SHA1 f41e402afe9420f3c4cc35a5d63b61fea0721be5
- SHA512 f6d50115ec95144dc97b8430782ebe5d6d614a3f71331ee0628fd5ba535ef885850548821bcdecdbc65cc8034279f7c464604f7df33da9604c962e9088251d8e
- SSDEEP 12288:kSvO2x9mONvKRILSFnOkx2LIaxy6RJ05FAQjU/LU:XvO2xJKRI2FOkx2LFEAcUY
- TLSH T1A8056C22F241C13AD4A7467185FE07ABA674BD10571257CBA3847B2A1FB36D2BE31B0D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-08_a4bbc1778942cd153b96dfe820bb40fd_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-08_a4bbc1778942cd153b96dfe820bb40fd_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-08_a4bbc1778942cd153b96dfe820bb40fd_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop
- Size 832KB
- SHA256 e46e93624bf809276f59293d307b99a95c738b1816ab050349f4b3ae93544c6b
- MD5 a4bbc1778942cd153b96dfe820bb40fd
- SHA1 f41e402afe9420f3c4cc35a5d63b61fea0721be5
- SHA512 f6d50115ec95144dc97b8430782ebe5d6d614a3f71331ee0628fd5ba535ef885850548821bcdecdbc65cc8034279f7c464604f7df33da9604c962e9088251d8e
- SSDEEP 12288:kSvO2x9mONvKRILSFnOkx2LIaxy6RJ05FAQjU/LU:XvO2xJKRI2FOkx2LFEAcUY
- TLSH T1A8056C22F241C13AD4A7467185FE07ABA674BD10571257CBA3847B2A1FB36D2BE31B0D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory