General
- Target 2026-07-20_4f478f579db97ccd04d28a65d8ba9fe8_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 97KB
- Sample260720-lx2tlady7n
- SHA256 8f38759a41312ade30a4f25772d56279f630e28d38a2e6f949f7081fc522107e
- MD5 4f478f579db97ccd04d28a65d8ba9fe8
- SHA1 1c62a26885b676e184c94bf653c0c4e96d1f6e9e
- SHA512 a5079c67087b7cc8d86391b4725e3005369938caa533db2bc363267ef22aaf05222cdeb730c2b392ca9f6b0a6adecb8501230b405f93645a2e6f94a83df9d9cd
- SSDEEP 768:dX5L/v28rbBBAs4efgciryxApKd+CfbjYfou+lt/fFTujSjAsOmqeiir7L+mn:7/db4Y4yxmCNu+r/tTujUAsOer7LPn
- TLSH T1D6A37C357AC182B2E33BCB7525F58296A73678352E16C60F61CD4B494D63B90CE36F0A
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-20_4f478f579db97ccd04d28a65d8ba9fe8_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_4f478f579db97ccd04d28a65d8ba9fe8_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 97KB
- SHA256 8f38759a41312ade30a4f25772d56279f630e28d38a2e6f949f7081fc522107e
- MD5 4f478f579db97ccd04d28a65d8ba9fe8
- SHA1 1c62a26885b676e184c94bf653c0c4e96d1f6e9e
- SHA512 a5079c67087b7cc8d86391b4725e3005369938caa533db2bc363267ef22aaf05222cdeb730c2b392ca9f6b0a6adecb8501230b405f93645a2e6f94a83df9d9cd
- SSDEEP 768:dX5L/v28rbBBAs4efgciryxApKd+CfbjYfou+lt/fFTujSjAsOmqeiir7L+mn:7/db4Y4yxmCNu+r/tTujUAsOer7LPn
- TLSH T1D6A37C357AC182B2E33BCB7525F58296A73678352E16C60F61CD4B494D63B90CE36F0A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE