General
- Target 2026-06-25_30d1d1deecfc897d66171ca8e9456148_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 92KB
- Sample260629-292mcsav9p
- SHA256 bf677cbfa4181466da1352f8577f6bcf8111a754d8dbc096e16ddaa1b593a29b
- MD5 30d1d1deecfc897d66171ca8e9456148
- SHA1 84e886b7d26da0712f1fc8ba7357c302bfe76a9b
- SHA512 1e1753723e1d0a8fb639f7ea1e590d0efa267d448d238c919682950b37f1c72baeff7b2937d88327d39824feb8d8d5caecd0600418bd7d2b6fed434f646bf991
- SSDEEP 1536:4Cd+qitb0bt+FTCQ2j9EvHsdX+u1X20n2eN6wrr0MR+a:H4b0hR9EE1+u1X2q2e3r2a
- TLSH T1979318347AD58532D33BCAB546F782CB7A36B6223D1A971E61CA43450C23B91DD39B0E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-06-25_30d1d1deecfc897d66171ca8e9456148_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-25_30d1d1deecfc897d66171ca8e9456148_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 92KB
- SHA256 bf677cbfa4181466da1352f8577f6bcf8111a754d8dbc096e16ddaa1b593a29b
- MD5 30d1d1deecfc897d66171ca8e9456148
- SHA1 84e886b7d26da0712f1fc8ba7357c302bfe76a9b
- SHA512 1e1753723e1d0a8fb639f7ea1e590d0efa267d448d238c919682950b37f1c72baeff7b2937d88327d39824feb8d8d5caecd0600418bd7d2b6fed434f646bf991
- SSDEEP 1536:4Cd+qitb0bt+FTCQ2j9EvHsdX+u1X20n2eN6wrr0MR+a:H4b0hR9EE1+u1X2q2e3r2a
- TLSH T1979318347AD58532D33BCAB546F782CB7A36B6223D1A971E61CA43450C23B91DD39B0E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE