General
- Target 2026-07-15_2064d972b212e6064c9a1008b5585d61_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 97KB
- Sample260715-hettgsdy3j
- SHA256 63a85cc18265edc78b96a251d6526b4aed80d4c52fc6e0eea7db10c78c882cfc
- MD5 2064d972b212e6064c9a1008b5585d61
- SHA1 6448500db2e40847888a054a355c706461fb9582
- SHA512 4f0aa57fbe939b22e574d6aab3022cfd9e9bedd43921e89ed19bf86c51fe5727b3ee400519cf29c012ea0eac7f4c1fd8eb92cbf9756eb5209906e1490df71a7a
- SSDEEP 768:YX5L/v28rbBBAs4efgciryxApKd+CfbjYfou+lt/fFTujSjAsOmqeiir7LfQabJ/:i/db4Y4yxmCNu+r/tTujUAsOer7LYs
- TLSH T179A37C2579C182B2E33BCB7524F58296A73778352E16C60F62CD4B494D63B90DE36F0A
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-15_2064d972b212e6064c9a1008b5585d61_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-15_2064d972b212e6064c9a1008b5585d61_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 97KB
- SHA256 63a85cc18265edc78b96a251d6526b4aed80d4c52fc6e0eea7db10c78c882cfc
- MD5 2064d972b212e6064c9a1008b5585d61
- SHA1 6448500db2e40847888a054a355c706461fb9582
- SHA512 4f0aa57fbe939b22e574d6aab3022cfd9e9bedd43921e89ed19bf86c51fe5727b3ee400519cf29c012ea0eac7f4c1fd8eb92cbf9756eb5209906e1490df71a7a
- SSDEEP 768:YX5L/v28rbBBAs4efgciryxApKd+CfbjYfou+lt/fFTujSjAsOmqeiir7LfQabJ/:i/db4Y4yxmCNu+r/tTujUAsOer7LYs
- TLSH T179A37C2579C182B2E33BCB7524F58296A73778352E16C60F62CD4B494D63B90DE36F0A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE