General
- Target 2026-06-25_c28dfec9a29c8fecf954dc447ea2469e_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 97KB
- Sample260629-yrdk2aft2k
- SHA256 3f2ec8b63594f848377e81e76626fdbdf15e56880423c5a225352b1526571048
- MD5 c28dfec9a29c8fecf954dc447ea2469e
- SHA1 d25f1b57ddd0bb25e96259a11e4c6000af7904c7
- SHA512 d54138d3af2cc1ca707b27fec69ada4f8b909f6203918c69a06f5dbbfc08bf3a375d5399a93625b0bc55dd1de571772e179b318ae48a962221fb39496462146f
- SSDEEP 1536:NzUIb25A8ULw005o09WDuYHGjUAsOwRwrXDQ25:dUIbS5xquYmSOwRE5
- TLSH T1BEA37C397AD18173D233C67594F582C7BA37B8267E16CA0F61CA070A4DA3B925D36B0D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-06-25_c28dfec9a29c8fecf954dc447ea2469e_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-25_c28dfec9a29c8fecf954dc447ea2469e_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 97KB
- SHA256 3f2ec8b63594f848377e81e76626fdbdf15e56880423c5a225352b1526571048
- MD5 c28dfec9a29c8fecf954dc447ea2469e
- SHA1 d25f1b57ddd0bb25e96259a11e4c6000af7904c7
- SHA512 d54138d3af2cc1ca707b27fec69ada4f8b909f6203918c69a06f5dbbfc08bf3a375d5399a93625b0bc55dd1de571772e179b318ae48a962221fb39496462146f
- SSDEEP 1536:NzUIb25A8ULw005o09WDuYHGjUAsOwRwrXDQ25:dUIbS5xquYmSOwRE5
- TLSH T1BEA37C397AD18173D233C67594F582C7BA37B8267E16CA0F61CA070A4DA3B925D36B0D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE