General
- Target 2026-06-28_b9d4dba3531e3db5289436ee9cf788c0_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 102KB
- Sample260630-rseq6ahs2m
- SHA256 cdd6c52794a7bfe1f52639b056efc8fdd33f189b666226340c5d01025101e3fc
- MD5 b9d4dba3531e3db5289436ee9cf788c0
- SHA1 b7fbb3bee9f1a7c64686419ece23a3310d8393bc
- SHA512 c5411773e2c16cabd9ce6d156cc6fd74a13a088f54e145028db1e493084a242b8ad9536a7eae9c3f6973c9ea274d39e9b902496c03f7085350086b0750601bb5
- SSDEEP 768:PX5L/v28rbBBAs4efgciryxApKd+CfbMYfou+lt/fFTujSjAsOmqeiirxxD3i:h/db4Y4yxmCGu+r/tTujUAsOer3DS
- TLSH T1ACA37E2675C181B2D237C73514B5C297A7337C356E26C61F62CD0B4A4EA3B809E3AB0E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-06-28_b9d4dba3531e3db5289436ee9cf788c0_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-28_b9d4dba3531e3db5289436ee9cf788c0_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 102KB
- SHA256 cdd6c52794a7bfe1f52639b056efc8fdd33f189b666226340c5d01025101e3fc
- MD5 b9d4dba3531e3db5289436ee9cf788c0
- SHA1 b7fbb3bee9f1a7c64686419ece23a3310d8393bc
- SHA512 c5411773e2c16cabd9ce6d156cc6fd74a13a088f54e145028db1e493084a242b8ad9536a7eae9c3f6973c9ea274d39e9b902496c03f7085350086b0750601bb5
- SSDEEP 768:PX5L/v28rbBBAs4efgciryxApKd+CfbMYfou+lt/fFTujSjAsOmqeiirxxD3i:h/db4Y4yxmCGu+r/tTujUAsOer3DS
- TLSH T1ACA37E2675C181B2D237C73514B5C297A7337C356E26C61F62CD0B4A4EA3B809E3AB0E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Custom signature
UPX dump on OEP (original entry point)
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE