General
- Target 2026-04-15_61a45845c7a62adfae316761faddc449_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 102KB
- Sample260416-aarvbscs8p
- SHA256 3e1ab8d6b489c2758ae2306795efd0554de72faa6db41560015d4be7191bf424
- MD5 61a45845c7a62adfae316761faddc449
- SHA1 870f46b1654355437838f9a5368a5b4f13172eee
- SHA512 ef097a43b8bf0d645bf0b38561f6ec3d573503496d5fde9fc71cd6629a5ed530b3400d0a7e61eef4068176a7417d10af6785b6f58021ce5f978012ca1e54b787
- SSDEEP 768:PX5L/v28rbBBAs4efgciryxApKd+CfbMYfou+lt/fFTujSjAsOmqeiirxxD3:h/db4Y4yxmCGu+r/tTujUAsOer3D3
- TLSH T18DA37E2675C181B2D137C73564B4C697A7337C796E26C61F62CD0B4A4EA3B805E3AB0E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-04-15_61a45845c7a62adfae316761faddc449_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260130-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-15_61a45845c7a62adfae316761faddc449_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 102KB
- SHA256 3e1ab8d6b489c2758ae2306795efd0554de72faa6db41560015d4be7191bf424
- MD5 61a45845c7a62adfae316761faddc449
- SHA1 870f46b1654355437838f9a5368a5b4f13172eee
- SHA512 ef097a43b8bf0d645bf0b38561f6ec3d573503496d5fde9fc71cd6629a5ed530b3400d0a7e61eef4068176a7417d10af6785b6f58021ce5f978012ca1e54b787
- SSDEEP 768:PX5L/v28rbBBAs4efgciryxApKd+CfbMYfou+lt/fFTujSjAsOmqeiirxxD3:h/db4Y4yxmCGu+r/tTujUAsOer3D3
- TLSH T18DA37E2675C181B2D137C73564B4C697A7337C796E26C61F62CD0B4A4EA3B805E3AB0E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE