General
- Target 2026-04-15_65da7aa4bb05823b6f1011ef002427c1_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 91KB
- Sample260415-qstdwafv9q
- SHA256 c290cc5fc464a1c0605f3aa8310160ec10b96d1d351ce6e24e07e26fe11d15ec
- MD5 65da7aa4bb05823b6f1011ef002427c1
- SHA1 d669899c06ac3aba16366deb532a12aa2bc118b1
- SHA512 5f3934800265399778c549d6dd04035621635eafa08a5308b90a762c930756beee61acd5f22bdf9fa22b72aca4dd0f13547aab0bd1e4282373694909b5d5a459
- SSDEEP 1536:4Cd+qitb0bt+FTCQ2j9EvHsdX+u1X20n2eN6wrr0MRx:H4b0hR9EE1+u1X2q2e3rZ
- TLSH T1259328347AD18432D33BCAB545F7C2CB7A36B6223D1A972E61CA43450D23B91AD3970E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-04-15_65da7aa4bb05823b6f1011ef002427c1_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260130-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-15_65da7aa4bb05823b6f1011ef002427c1_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 91KB
- SHA256 c290cc5fc464a1c0605f3aa8310160ec10b96d1d351ce6e24e07e26fe11d15ec
- MD5 65da7aa4bb05823b6f1011ef002427c1
- SHA1 d669899c06ac3aba16366deb532a12aa2bc118b1
- SHA512 5f3934800265399778c549d6dd04035621635eafa08a5308b90a762c930756beee61acd5f22bdf9fa22b72aca4dd0f13547aab0bd1e4282373694909b5d5a459
- SSDEEP 1536:4Cd+qitb0bt+FTCQ2j9EvHsdX+u1X20n2eN6wrr0MRx:H4b0hR9EE1+u1X2q2e3rZ
- TLSH T1259328347AD18432D33BCAB545F7C2CB7A36B6223D1A972E61CA43450D23B91AD3970E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE