General
- Target 2026-07-01_20d6720e966cf9b9ba4b46a7779859d2_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 97KB
- Sample260701-2cs9qafv4p
- SHA256 a034785ba5d3197a513929c5823e3c8c87ab8bd62963fd72bd5778b82e433fc9
- MD5 20d6720e966cf9b9ba4b46a7779859d2
- SHA1 8d9ae0acae36f2d06b2e8454c0a915ee9bdea542
- SHA512 419618f61ca336576757a5058649bcb50be952c626ff69d38fdbf447abe914f7e3ca356f18de4431342e5eda9bf1897b11a9a8cab62d3a5796f5fe2d34710fe4
- SSDEEP 1536:NzUIb25A8ULw005o09WDuYHGjUAsOwRwrXDG:dUIbS5xquYmSOwRV
- TLSH T11DA37C267AD18173D233C67558F5C2C7BA37B8267E16CA0F61CA070A4DA3B925D36B0D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-01_20d6720e966cf9b9ba4b46a7779859d2_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-01_20d6720e966cf9b9ba4b46a7779859d2_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 97KB
- SHA256 a034785ba5d3197a513929c5823e3c8c87ab8bd62963fd72bd5778b82e433fc9
- MD5 20d6720e966cf9b9ba4b46a7779859d2
- SHA1 8d9ae0acae36f2d06b2e8454c0a915ee9bdea542
- SHA512 419618f61ca336576757a5058649bcb50be952c626ff69d38fdbf447abe914f7e3ca356f18de4431342e5eda9bf1897b11a9a8cab62d3a5796f5fe2d34710fe4
- SSDEEP 1536:NzUIb25A8ULw005o09WDuYHGjUAsOwRwrXDG:dUIbS5xquYmSOwRV
- TLSH T11DA37C267AD18173D233C67558F5C2C7BA37B8267E16CA0F61CA070A4DA3B925D36B0D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE