General
- Target 2026-07-05_24acdaf5304b5417b128056418f0684c_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 94KB
- Sample260705-tr97sahw7j
- SHA256 a08490eb84649760eb92e33f7ed0bf873c12693117207017b9eece4d98a0e8a8
- MD5 24acdaf5304b5417b128056418f0684c
- SHA1 4f7dab6ded7945020b9df4a51c81d4563b242aa6
- SHA512 3ca81060f6204d2b49e0aa6ce72727979ffbe5cb5740f4e3c55a28902b7128d9d21440a408604a8728e988e0eaf363d29abf2ca8824220d073b65de04d4b7221
- SSDEEP 1536:4Cd+qitb0bt+FTCQ2j9EvHsdX+u1X20n2eN6wrr0MR+f:H4b0hR9EE1+u1X2q2e3r2f
- TLSH T1EF9307347AD58532D33BCAB546F782CB7A36B6223D06971E61CA43450C23BA1DD79B0E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-05_24acdaf5304b5417b128056418f0684c_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-05_24acdaf5304b5417b128056418f0684c_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 94KB
- SHA256 a08490eb84649760eb92e33f7ed0bf873c12693117207017b9eece4d98a0e8a8
- MD5 24acdaf5304b5417b128056418f0684c
- SHA1 4f7dab6ded7945020b9df4a51c81d4563b242aa6
- SHA512 3ca81060f6204d2b49e0aa6ce72727979ffbe5cb5740f4e3c55a28902b7128d9d21440a408604a8728e988e0eaf363d29abf2ca8824220d073b65de04d4b7221
- SSDEEP 1536:4Cd+qitb0bt+FTCQ2j9EvHsdX+u1X20n2eN6wrr0MR+f:H4b0hR9EE1+u1X2q2e3r2f
- TLSH T1EF9307347AD58532D33BCAB546F782CB7A36B6223D06971E61CA43450C23BA1DD79B0E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE