General
- Target 2026-07-22_52059465e297ce006cf260d81839a6fa_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 94KB
- Sample260723-cafheavsbt
- SHA256 90c34bb8b63c30b68885b52acdae9da5633256e93400de18b8bd337e23c82905
- MD5 52059465e297ce006cf260d81839a6fa
- SHA1 1b2e982464d6217500393bcd4f2c892930af9ff7
- SHA512 ba44e704ee27c22e1e48084cba370ea4f140a160012eee9d46f3446009eeec0c4604514a9ccb615fdf7fe4c99ad72467db8cf964421704bbf8a0a759a40cdb93
- SSDEEP 1536:4Cd+qitb0bt+FTCQ2j9EvHsdX+u1X20n2eN6wrr0MR+m:H4b0hR9EE1+u1X2q2e3r2m
- TLSH T1C99307347AD58532D33BCAB546F782CA7A36B6223D0A971E61CA43450C23F91DD79B0E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-22_52059465e297ce006cf260d81839a6fa_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-22_52059465e297ce006cf260d81839a6fa_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 94KB
- SHA256 90c34bb8b63c30b68885b52acdae9da5633256e93400de18b8bd337e23c82905
- MD5 52059465e297ce006cf260d81839a6fa
- SHA1 1b2e982464d6217500393bcd4f2c892930af9ff7
- SHA512 ba44e704ee27c22e1e48084cba370ea4f140a160012eee9d46f3446009eeec0c4604514a9ccb615fdf7fe4c99ad72467db8cf964421704bbf8a0a759a40cdb93
- SSDEEP 1536:4Cd+qitb0bt+FTCQ2j9EvHsdX+u1X20n2eN6wrr0MR+m:H4b0hR9EE1+u1X2q2e3r2m
- TLSH T1C99307347AD58532D33BCAB546F782CA7A36B6223D0A971E61CA43450C23F91DD79B0E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE