General
- Target 2026-10-11_3e1b9bc599825aa576ad59fc54f9c2ae_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop
- Size 399KB
- Sample261012-3rns8ahs51
- SHA256 031d3999194a4b5250b43ca091e935d0abca0d95aed10e0cddc3b584b53f1a03
- MD5 3e1b9bc599825aa576ad59fc54f9c2ae
- SHA1 5f63225baf3d9cff9cec539fc7b56b9bb6e26ef0
- SHA512 4c2f74f758c04f1e3b0ae3c9d6e79f67508a2522397d31c6a411f926c31cee241737e288212525b81cc0781900ef96cfcc7d21f46bcbdcfa99e708c2caa4da20
- SSDEEP 6144:qKiYJL+K7EQ5vrt5AVfL8haEK4sDzLPFZcEOkCybEaQRXr9HNdvOaO:WqEU0Vf4ha0sDzDOkx2LIaO
- TLSH T18A946D25FAA08073C567857A84E257ABFBB1752127108ACFA390075A5F237E3BD3631D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-11_3e1b9bc599825aa576ad59fc54f9c2ae_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-11_3e1b9bc599825aa576ad59fc54f9c2ae_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-11_3e1b9bc599825aa576ad59fc54f9c2ae_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop
- Size 399KB
- SHA256 031d3999194a4b5250b43ca091e935d0abca0d95aed10e0cddc3b584b53f1a03
- MD5 3e1b9bc599825aa576ad59fc54f9c2ae
- SHA1 5f63225baf3d9cff9cec539fc7b56b9bb6e26ef0
- SHA512 4c2f74f758c04f1e3b0ae3c9d6e79f67508a2522397d31c6a411f926c31cee241737e288212525b81cc0781900ef96cfcc7d21f46bcbdcfa99e708c2caa4da20
- SSDEEP 6144:qKiYJL+K7EQ5vrt5AVfL8haEK4sDzLPFZcEOkCybEaQRXr9HNdvOaO:WqEU0Vf4ha0sDzDOkx2LIaO
- TLSH T18A946D25FAA08073C567857A84E257ABFBB1752127108ACFA390075A5F237E3BD3631D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory