General
- Target 2026-10-12_aaf4066c593ab2842c77160241f87f48_amadey_coinminer_elex_graphican_remcos_rhadamanthys_smoke-loader_stop
- Size 395KB
- Sample261013-29pb2acy4v
- SHA256 72ece30879e2513d8e0b56d34e3463798f34acf62b6b1446a4adca4673673edc
- MD5 aaf4066c593ab2842c77160241f87f48
- SHA1 b692e536a6a1443138e49f3f86de416bf401da49
- SHA512 73f7c05022985cb08b44dee5758883f327756f10be68fb2a8aa7c08611b06a873ba507baa4d6094d34a072cf6a891b3b81147cafe6394fd4067598f430d2b2b6
- SSDEEP 6144:0QtK91cOo9qoiTpppLeIUfdLyO2QFicEOkCybEaQRXr9HNdvOaxy8K:039OFaPpKIUfdLyO8Okx2LIaxy
- TLSH T16F847D2AB7A0D076C4B79579C49247AAFEB1B42137204ACFA390475A1F237E2BD3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-12_aaf4066c593ab2842c77160241f87f48_amadey_coinminer_elex_graphican_remcos_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-12_aaf4066c593ab2842c77160241f87f48_amadey_coinminer_elex_graphican_remcos_rhadamanthys_smoke-loader_stop.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-12_aaf4066c593ab2842c77160241f87f48_amadey_coinminer_elex_graphican_remcos_rhadamanthys_smoke-loader_stop
- Size 395KB
- SHA256 72ece30879e2513d8e0b56d34e3463798f34acf62b6b1446a4adca4673673edc
- MD5 aaf4066c593ab2842c77160241f87f48
- SHA1 b692e536a6a1443138e49f3f86de416bf401da49
- SHA512 73f7c05022985cb08b44dee5758883f327756f10be68fb2a8aa7c08611b06a873ba507baa4d6094d34a072cf6a891b3b81147cafe6394fd4067598f430d2b2b6
- SSDEEP 6144:0QtK91cOo9qoiTpppLeIUfdLyO2QFicEOkCybEaQRXr9HNdvOaxy8K:039OFaPpKIUfdLyO8Okx2LIaxy
- TLSH T16F847D2AB7A0D076C4B79579C49247AAFEB1B42137204ACFA390475A1F237E2BD3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory