General
- Target 2026-07-20_def6f573d2fc3f5993cf7bd50d1be86a_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 97KB
- Sample260720-m87dwsfy8p
- SHA256 5ebed2b5e71406d60f3a57b1ab6a6641809850762332650aced8bcac0dd23a7b
- MD5 def6f573d2fc3f5993cf7bd50d1be86a
- SHA1 b18ed2abcd0e3fa3e59a768cd4c9593fb9f87a9b
- SHA512 0d83029ff290a25131af9aada0c5b51321223cb7a0db2a1bbd14b1ba696348ec96e58302f382cef98d7e1ade1dcdc53c28a08027fa71cb5b476d1e62f4935a95
- SSDEEP 768:dX5L/v28rbBBAs4efgciryxApKd+CfbjYfou+lt/fFTujSjAsOmqeiir7L+1:7/db4Y4yxmCNu+r/tTujUAsOer7L6
- TLSH T159A36C3576C182B2E33BCB7524F58296A73679352E16C60F62CD4B494D63A90CE36F0A
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-20_def6f573d2fc3f5993cf7bd50d1be86a_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_def6f573d2fc3f5993cf7bd50d1be86a_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 97KB
- SHA256 5ebed2b5e71406d60f3a57b1ab6a6641809850762332650aced8bcac0dd23a7b
- MD5 def6f573d2fc3f5993cf7bd50d1be86a
- SHA1 b18ed2abcd0e3fa3e59a768cd4c9593fb9f87a9b
- SHA512 0d83029ff290a25131af9aada0c5b51321223cb7a0db2a1bbd14b1ba696348ec96e58302f382cef98d7e1ade1dcdc53c28a08027fa71cb5b476d1e62f4935a95
- SSDEEP 768:dX5L/v28rbBBAs4efgciryxApKd+CfbjYfou+lt/fFTujSjAsOmqeiir7L+1:7/db4Y4yxmCNu+r/tTujUAsOer7L6
- TLSH T159A36C3576C182B2E33BCB7524F58296A73679352E16C60F62CD4B494D63A90CE36F0A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE