General
- Target 2026-07-12_97d71adc312fec51633b6a44efd39575_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 94KB
- Sample260712-ksrmdse13m
- SHA256 d980e133f1e074ba9a80519298fcbfc215d3150217069e9d32c8cfa7695b9880
- MD5 97d71adc312fec51633b6a44efd39575
- SHA1 df709126354fb1190291a6d19581b8401907f918
- SHA512 617a67a20e6f6f7fc6a4bbafc3b0f1f1dffa225ed6a00361baf8885cb83448d11dff46b9a7edecb79ec56833239394b34c72da57128996149381e88f1ce25bab
- SSDEEP 1536:4Cd+qitb0bt+FTCQ2j9EvHsdX+u1X20n2eN6wrr0MR+p:H4b0hR9EE1+u1X2q2e3r2p
- TLSH T1C29307347AD58532D33BCAB546F782CA7A36B6223D0A971E61CA43450C33B91DD79B0E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-12_97d71adc312fec51633b6a44efd39575_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-12_97d71adc312fec51633b6a44efd39575_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 94KB
- SHA256 d980e133f1e074ba9a80519298fcbfc215d3150217069e9d32c8cfa7695b9880
- MD5 97d71adc312fec51633b6a44efd39575
- SHA1 df709126354fb1190291a6d19581b8401907f918
- SHA512 617a67a20e6f6f7fc6a4bbafc3b0f1f1dffa225ed6a00361baf8885cb83448d11dff46b9a7edecb79ec56833239394b34c72da57128996149381e88f1ce25bab
- SSDEEP 1536:4Cd+qitb0bt+FTCQ2j9EvHsdX+u1X20n2eN6wrr0MR+p:H4b0hR9EE1+u1X2q2e3r2p
- TLSH T1C29307347AD58532D33BCAB546F782CA7A36B6223D0A971E61CA43450C33B91DD79B0E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE