General
- Target 2026-07-04_2c8a0f343a95c0c97efe45cdc15e14d4_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 97KB
- Sample260704-e11x5sa15v
- SHA256 f21556a8a060d96c44ac1bb2fc5ee8e30a3b782d2d4d453877edbf210b53b0b6
- MD5 2c8a0f343a95c0c97efe45cdc15e14d4
- SHA1 fc64a3071aa394485fb0ecc464a4f6395aaad20c
- SHA512 593a8b0589461a641682f53ca1d3eb88b5c311da33de4b15c942007e8668cb8cb33f3abc2186dbf32195943c7336a6a502d722daeed2f49748787309029fd977
- SSDEEP 768:dX5L/v28rbBBAs4efgciryxApKd+CfbjYfou+lt/fFTujSjAsOmqeiir7L+m1:7/db4Y4yxmCNu+r/tTujUAsOer7LP1
- TLSH T129A37C357AD182B2E33BCB7524F58296A73678352E16C60F61CD4B494D63B90CE36F0A
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-04_2c8a0f343a95c0c97efe45cdc15e14d4_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-04_2c8a0f343a95c0c97efe45cdc15e14d4_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 97KB
- SHA256 f21556a8a060d96c44ac1bb2fc5ee8e30a3b782d2d4d453877edbf210b53b0b6
- MD5 2c8a0f343a95c0c97efe45cdc15e14d4
- SHA1 fc64a3071aa394485fb0ecc464a4f6395aaad20c
- SHA512 593a8b0589461a641682f53ca1d3eb88b5c311da33de4b15c942007e8668cb8cb33f3abc2186dbf32195943c7336a6a502d722daeed2f49748787309029fd977
- SSDEEP 768:dX5L/v28rbBBAs4efgciryxApKd+CfbjYfou+lt/fFTujSjAsOmqeiir7L+m1:7/db4Y4yxmCNu+r/tTujUAsOer7LP1
- TLSH T129A37C357AD182B2E33BCB7524F58296A73678352E16C60F61CD4B494D63B90CE36F0A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE