General
- Target 2026-05-04_d4c3a30e39acdd88f6370d77ad48b89d_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 95KB
- Sample260504-e2w1ksfz7m
- SHA256 564e202329060cf31516b06324edfd352f0b79a63f7a85e4fe1775a6bd62b207
- MD5 d4c3a30e39acdd88f6370d77ad48b89d
- SHA1 19a0f20bf643f8b557314168935ae3595b97a09b
- SHA512 f0e240794525fa8ea7788de417c8bade44a248c255e4ff9037acaf0aeb291a82550811e8f049d6570dfb343d77c64ee2c5d684f7da2f6a46138bb29be60c4a98
- SSDEEP 768:lX5L/v28rbBBAs4efgciryxApKd+CfbjYfou+lt/fFTujSjAsOmqeiir7L5:T/db4Y4yxmCNu+r/tTujUAsOer7L5
- TLSH T13A938E2675C182B2D337CB7524F5C297A73779352E16C60F62CD4B494EA36808E3AF0A
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-05-04_d4c3a30e39acdd88f6370d77ad48b89d_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260130-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-04_d4c3a30e39acdd88f6370d77ad48b89d_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 95KB
- SHA256 564e202329060cf31516b06324edfd352f0b79a63f7a85e4fe1775a6bd62b207
- MD5 d4c3a30e39acdd88f6370d77ad48b89d
- SHA1 19a0f20bf643f8b557314168935ae3595b97a09b
- SHA512 f0e240794525fa8ea7788de417c8bade44a248c255e4ff9037acaf0aeb291a82550811e8f049d6570dfb343d77c64ee2c5d684f7da2f6a46138bb29be60c4a98
- SSDEEP 768:lX5L/v28rbBBAs4efgciryxApKd+CfbjYfou+lt/fFTujSjAsOmqeiir7L5:T/db4Y4yxmCNu+r/tTujUAsOer7L5
- TLSH T13A938E2675C182B2D337CB7524F5C297A73779352E16C60F62CD4B494EA36808E3AF0A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Custom signature
UPX dump on OEP (original entry point)
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE