General
- Target 2026-07-20_c39d41d0b8bc70b550581675cfe2d4a3_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 97KB
- Sample260720-ncwg7aat5v
- SHA256 f46e87b19a0113e9b562684a4e53cd6a76d74483a78be8323e35b41a04101af1
- MD5 c39d41d0b8bc70b550581675cfe2d4a3
- SHA1 2e316e4bdd14e80c44141b48d4e8f7344718aac7
- SHA512 b74620eb8993395403baa62bc7d8b9689f1628834162f1a1970a757ee39eb805a91d93eebddae52170e4ef24fd4429bfcda4cb699efa86f6e6b2b3599abdda2e
- SSDEEP 768:dX5L/v28rbBBAs4efgciryxApKd+CfbjYfou+lt/fFTujSjAsOmqeiir7L+r:7/db4Y4yxmCNu+r/tTujUAsOer7LA
- TLSH T134A36C3576C182B2E33BCB7524F58296A73779352E16C60F62CD4B494D63A90CE36F0A
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-20_c39d41d0b8bc70b550581675cfe2d4a3_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_c39d41d0b8bc70b550581675cfe2d4a3_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 97KB
- SHA256 f46e87b19a0113e9b562684a4e53cd6a76d74483a78be8323e35b41a04101af1
- MD5 c39d41d0b8bc70b550581675cfe2d4a3
- SHA1 2e316e4bdd14e80c44141b48d4e8f7344718aac7
- SHA512 b74620eb8993395403baa62bc7d8b9689f1628834162f1a1970a757ee39eb805a91d93eebddae52170e4ef24fd4429bfcda4cb699efa86f6e6b2b3599abdda2e
- SSDEEP 768:dX5L/v28rbBBAs4efgciryxApKd+CfbjYfou+lt/fFTujSjAsOmqeiir7L+r:7/db4Y4yxmCNu+r/tTujUAsOer7LA
- TLSH T134A36C3576C182B2E33BCB7524F58296A73779352E16C60F62CD4B494D63A90CE36F0A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Custom signature
UPX dump on OEP (original entry point)
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE