General
- Target 2026-07-21_eb6a49455990c1a781fc6e63e980459d_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 97KB
- Sample260721-ctg6cact6n
- SHA256 effffdcedd0a4e094023b8a7faaf10078f2f4d7279e773018af861f9b9699a45
- MD5 eb6a49455990c1a781fc6e63e980459d
- SHA1 1cd6a516e895c75d030514256d8f66375388a670
- SHA512 cb1fbbfc53e3303ecfe06207ac671b391e34ba00aab7434b9ac166431e27631bfbb34b45805457386c7d03fbb0c6590e5726fb23912c4ee108802ffc5ed5c0a1
- SSDEEP 768:dX5L/v28rbBBAs4efgciryxApKd+CfbjYfou+lt/fFTujSjAsOmqeiir7L+mk:7/db4Y4yxmCNu+r/tTujUAsOer7LPk
- TLSH T1A0A36C3576D182B2E33BCB7524F58296A73678352E16C60F62CD4B494D63B90CE36F0A
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-21_eb6a49455990c1a781fc6e63e980459d_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-21_eb6a49455990c1a781fc6e63e980459d_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 97KB
- SHA256 effffdcedd0a4e094023b8a7faaf10078f2f4d7279e773018af861f9b9699a45
- MD5 eb6a49455990c1a781fc6e63e980459d
- SHA1 1cd6a516e895c75d030514256d8f66375388a670
- SHA512 cb1fbbfc53e3303ecfe06207ac671b391e34ba00aab7434b9ac166431e27631bfbb34b45805457386c7d03fbb0c6590e5726fb23912c4ee108802ffc5ed5c0a1
- SSDEEP 768:dX5L/v28rbBBAs4efgciryxApKd+CfbjYfou+lt/fFTujSjAsOmqeiir7L+mk:7/db4Y4yxmCNu+r/tTujUAsOer7LPk
- TLSH T1A0A36C3576D182B2E33BCB7524F58296A73678352E16C60F62CD4B494D63B90CE36F0A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE