General
- Target 2026-05-03_7d75390010c536c3aa8f2801ffd13abc_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 100KB
- Sample260503-e44s7sbw6y
- SHA256 69937b363f3747aa6ee9369e77d9db24bcf6908a6dca6848dc43768c9e7e91bb
- MD5 7d75390010c536c3aa8f2801ffd13abc
- SHA1 aa08f1c72978fa43ac1d083a4f2200e9c6587430
- SHA512 1628f3cc7ef36cae147bb4e3425acb4442b8440cd8388c4252bffba97f117c16737484bd609626d0109a9fe6d268d5c44d299d1dabbb6074a6e93e17cfddca0c
- SSDEEP 768:JX5L/v28rbBBAs4efgciryxApKd+CfbjYfou+lt/fFTujSjAsOmqeiir7LKbum:H/db4Y4yxmCNu+r/tTujUAsOer7LQum
- TLSH T1D2A35C257AD18272E33BCB7529F582D7A736B8352E16C60E61CD47490D63B90CE36F0A
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-05-03_7d75390010c536c3aa8f2801ffd13abc_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260130-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-03_7d75390010c536c3aa8f2801ffd13abc_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 100KB
- SHA256 69937b363f3747aa6ee9369e77d9db24bcf6908a6dca6848dc43768c9e7e91bb
- MD5 7d75390010c536c3aa8f2801ffd13abc
- SHA1 aa08f1c72978fa43ac1d083a4f2200e9c6587430
- SHA512 1628f3cc7ef36cae147bb4e3425acb4442b8440cd8388c4252bffba97f117c16737484bd609626d0109a9fe6d268d5c44d299d1dabbb6074a6e93e17cfddca0c
- SSDEEP 768:JX5L/v28rbBBAs4efgciryxApKd+CfbjYfou+lt/fFTujSjAsOmqeiir7LKbum:H/db4Y4yxmCNu+r/tTujUAsOer7LQum
- TLSH T1D2A35C257AD18272E33BCB7529F582D7A736B8352E16C60E61CD47490D63B90CE36F0A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Custom signature
UPX dump on OEP (original entry point)
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE