General
- Target 2026-07-13_2fe4908ca9d09edd5d21c78622ffa375_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 94KB
- Sample260714-b136qaev41
- SHA256 a3de3f865f07f059675577eef4b56d53395f9c0f48a0dab28254a1c9e39a2a1b
- MD5 2fe4908ca9d09edd5d21c78622ffa375
- SHA1 2e8fc0840ee70e522f2b1303faf3a0ed670ee9d7
- SHA512 74bb325588ef272b4c987dfd597352752d114d06ef8c3eea10e09d921097cc4290ded28e01a85d58f0c16e4d782a1cfbec2fe5ae67b6ff3229622238c0472860
- SSDEEP 1536:4Cd+qitb0bt+FTCQ2j9EvHsdX+u1X20n2eN6wrr0MR+H:H4b0hR9EE1+u1X2q2e3r2H
- TLSH T11C9308347AD58532D33BCAB546F782CB7A36B6223D0A971E61CA43450C23B91DD79B0E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-13_2fe4908ca9d09edd5d21c78622ffa375_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-13_2fe4908ca9d09edd5d21c78622ffa375_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 94KB
- SHA256 a3de3f865f07f059675577eef4b56d53395f9c0f48a0dab28254a1c9e39a2a1b
- MD5 2fe4908ca9d09edd5d21c78622ffa375
- SHA1 2e8fc0840ee70e522f2b1303faf3a0ed670ee9d7
- SHA512 74bb325588ef272b4c987dfd597352752d114d06ef8c3eea10e09d921097cc4290ded28e01a85d58f0c16e4d782a1cfbec2fe5ae67b6ff3229622238c0472860
- SSDEEP 1536:4Cd+qitb0bt+FTCQ2j9EvHsdX+u1X20n2eN6wrr0MR+H:H4b0hR9EE1+u1X2q2e3r2H
- TLSH T11C9308347AD58532D33BCAB546F782CB7A36B6223D0A971E61CA43450C23B91DD79B0E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE