General
- Target 2026-07-05_0c5b1c6a7128a8f57cc2b0fe7a81ff32_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 94KB
- Sample260705-113bvsbx8l
- SHA256 7ad1043e3386b105d0e41e7949ed5263dc7e85c330ba18aaa2fe7b2ed5108e53
- MD5 0c5b1c6a7128a8f57cc2b0fe7a81ff32
- SHA1 b99ea4d1c3dd7e9722d3b829815547149b481b9a
- SHA512 789960eed77fed860cf9ca30ad6e81bc6e430cf4571022d34319211841595d376ef14c3a33b1711ee00fa1ce7a9967a5255e5d899e13cb203f1991627df9446a
- SSDEEP 1536:4Cd+qitb0bt+FTCQ2j9EvHsdX+u1X20n2eN6wrr0MR+4:H4b0hR9EE1+u1X2q2e3r24
- TLSH T1C29307347AD58532D33BCAB546F782CB7A36B6223D0A971E61CA43450C23B91DD79B0E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-05_0c5b1c6a7128a8f57cc2b0fe7a81ff32_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-05_0c5b1c6a7128a8f57cc2b0fe7a81ff32_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 94KB
- SHA256 7ad1043e3386b105d0e41e7949ed5263dc7e85c330ba18aaa2fe7b2ed5108e53
- MD5 0c5b1c6a7128a8f57cc2b0fe7a81ff32
- SHA1 b99ea4d1c3dd7e9722d3b829815547149b481b9a
- SHA512 789960eed77fed860cf9ca30ad6e81bc6e430cf4571022d34319211841595d376ef14c3a33b1711ee00fa1ce7a9967a5255e5d899e13cb203f1991627df9446a
- SSDEEP 1536:4Cd+qitb0bt+FTCQ2j9EvHsdX+u1X20n2eN6wrr0MR+4:H4b0hR9EE1+u1X2q2e3r24
- TLSH T1C29307347AD58532D33BCAB546F782CB7A36B6223D0A971E61CA43450C23B91DD79B0E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE