General
- Target 2026-07-01_04138e1559f0a816cb3ec587678fb783_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 97KB
- Sample260701-cbq1jad16x
- SHA256 8c40a34e633ec7a1a16ace4c5911fad05529f22e9e566336f22bd8af86ac6d3c
- MD5 04138e1559f0a816cb3ec587678fb783
- SHA1 de74388ce67e6ad62ab36b031fef20cdb072af35
- SHA512 6e141719cef923463e624da8d32c6182376ce7c14307bd1304c88c00509c749dfd5ec29030f009502be2fc9d0b6db6c197635a0f8d8d486d9513ed660624ea07
- SSDEEP 768:dX5L/v28rbBBAs4efgciryxApKd+CfbjYfou+lt/fFTujSjAsOmqeiir7L+0:7/db4Y4yxmCNu+r/tTujUAsOer7LP
- TLSH T136A37C3575C182B2E33BCB7564F58296A736B8352E16C60F61CD4B494D63B90CE3AF0A
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-01_04138e1559f0a816cb3ec587678fb783_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-01_04138e1559f0a816cb3ec587678fb783_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 97KB
- SHA256 8c40a34e633ec7a1a16ace4c5911fad05529f22e9e566336f22bd8af86ac6d3c
- MD5 04138e1559f0a816cb3ec587678fb783
- SHA1 de74388ce67e6ad62ab36b031fef20cdb072af35
- SHA512 6e141719cef923463e624da8d32c6182376ce7c14307bd1304c88c00509c749dfd5ec29030f009502be2fc9d0b6db6c197635a0f8d8d486d9513ed660624ea07
- SSDEEP 768:dX5L/v28rbBBAs4efgciryxApKd+CfbjYfou+lt/fFTujSjAsOmqeiir7L+0:7/db4Y4yxmCNu+r/tTujUAsOer7LP
- TLSH T136A37C3575C182B2E33BCB7564F58296A736B8352E16C60F61CD4B494D63B90CE3AF0A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE