General
- Target 2026-10-09_fd9f800e373a703a3abf1a1f836aa0af_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop
- Size 395KB
- Sample261009-271maaeg73
- SHA256 4fbba38726202bfe102d25cb46a625d06a016402a4568d648f175247d937b80c
- MD5 fd9f800e373a703a3abf1a1f836aa0af
- SHA1 c68ff3d8332c370d5877810eda7da77665dad772
- SHA512 c5395caff766ac04cb536c77e116c968553ec517f556015e4992e2477840da2049fe4f7fa78717931e4ab8eb4da890d053f6b88b9ce1216bc0ce47d8a0a02661
- SSDEEP 6144:wWVrC1c2oonALgPLj7vfFLKlOIFGcEOkCybEaQRXr9HNdvOaxy8K:wkCO2zVPX7vfFLKlwOkx2LIaxy
- TLSH T1D6846B2AB6A0D036C4779574C4A257AAFFB1B42237204ACFA390475A1F237E2BD7531D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-09_fd9f800e373a703a3abf1a1f836aa0af_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-09_fd9f800e373a703a3abf1a1f836aa0af_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-09_fd9f800e373a703a3abf1a1f836aa0af_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop
- Size 395KB
- SHA256 4fbba38726202bfe102d25cb46a625d06a016402a4568d648f175247d937b80c
- MD5 fd9f800e373a703a3abf1a1f836aa0af
- SHA1 c68ff3d8332c370d5877810eda7da77665dad772
- SHA512 c5395caff766ac04cb536c77e116c968553ec517f556015e4992e2477840da2049fe4f7fa78717931e4ab8eb4da890d053f6b88b9ce1216bc0ce47d8a0a02661
- SSDEEP 6144:wWVrC1c2oonALgPLj7vfFLKlOIFGcEOkCybEaQRXr9HNdvOaxy8K:wkCO2zVPX7vfFLKlwOkx2LIaxy
- TLSH T1D6846B2AB6A0D036C4779574C4A257AAFFB1B42237204ACFA390475A1F237E2BD7531D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory