General
- Target 2026-07-17_149536de09cff2393590da78bb1f35d4_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 97KB
- Sample260717-mxpdyads2w
- SHA256 dd637b406aa82d951ff963d3139622b9ee319f54c2241752fea664f3e9098298
- MD5 149536de09cff2393590da78bb1f35d4
- SHA1 2e4590fd36e09384cab897d5fd919e68b3d3b3c5
- SHA512 11b6bb242b6457e74b0c46e134f4aad5cf3d1123e10fc6f473842290bdb6a48a6e30013bd880798bd31fc3f1f462cf3d9d315d013ba8ef7c46e2fc209dbc28e8
- SSDEEP 768:YX5L/v28rbBBAs4efgciryxApKd+CfbjYfou+lt/fFTujSjAsOmqeiir7LfQabJS:i/db4Y4yxmCNu+r/tTujUAsOer7LYF
- TLSH T188A37C257AC182B2E33BCB7524F58296A73778352E16C60F61CD4B494D63B90DE36F0A
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-17_149536de09cff2393590da78bb1f35d4_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-17_149536de09cff2393590da78bb1f35d4_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 97KB
- SHA256 dd637b406aa82d951ff963d3139622b9ee319f54c2241752fea664f3e9098298
- MD5 149536de09cff2393590da78bb1f35d4
- SHA1 2e4590fd36e09384cab897d5fd919e68b3d3b3c5
- SHA512 11b6bb242b6457e74b0c46e134f4aad5cf3d1123e10fc6f473842290bdb6a48a6e30013bd880798bd31fc3f1f462cf3d9d315d013ba8ef7c46e2fc209dbc28e8
- SSDEEP 768:YX5L/v28rbBBAs4efgciryxApKd+CfbjYfou+lt/fFTujSjAsOmqeiir7LfQabJS:i/db4Y4yxmCNu+r/tTujUAsOer7LYF
- TLSH T188A37C257AC182B2E33BCB7524F58296A73778352E16C60F61CD4B494D63B90DE36F0A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE