General
- Target 2026-10-10_c72d5145f374d2bda639ab9433656b9f_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop
- Size 487KB
- Sample261011-c7debac12p
- SHA256 4d4ce35921c3d26f981341aefd2b9c7a0d505bb88812040dda61d12a83f9b08e
- MD5 c72d5145f374d2bda639ab9433656b9f
- SHA1 383d654db3a771fa707397a1969b688c5da05418
- SHA512 068681f0142969ff7ef8dbcbc06a62963d6f0943c218cd039cfaf30417638c5cd7ac61adfa13563e4017b69ab441a70586042a44f06b0d2f5e090ad84a8870c8
- SSDEEP 6144:TcTgav1cdCTuoPbgwmOLJvKRILSFvdFDcEOkCybEaQRXr9HNdvOaxy8KU5R2:TSvO2x9mONvKRILSFnOkx2LIaxya5g
- TLSH T1EEB45B26B6908036C0B78675C5F64BAAFAB5BC21631186CFA380365A1F737D2BD3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-10_c72d5145f374d2bda639ab9433656b9f_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-10_c72d5145f374d2bda639ab9433656b9f_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-10_c72d5145f374d2bda639ab9433656b9f_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop
- Size 487KB
- SHA256 4d4ce35921c3d26f981341aefd2b9c7a0d505bb88812040dda61d12a83f9b08e
- MD5 c72d5145f374d2bda639ab9433656b9f
- SHA1 383d654db3a771fa707397a1969b688c5da05418
- SHA512 068681f0142969ff7ef8dbcbc06a62963d6f0943c218cd039cfaf30417638c5cd7ac61adfa13563e4017b69ab441a70586042a44f06b0d2f5e090ad84a8870c8
- SSDEEP 6144:TcTgav1cdCTuoPbgwmOLJvKRILSFvdFDcEOkCybEaQRXr9HNdvOaxy8KU5R2:TSvO2x9mONvKRILSFnOkx2LIaxya5g
- TLSH T1EEB45B26B6908036C0B78675C5F64BAAFAB5BC21631186CFA380365A1F737D2BD3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory