General
- Target 2026-07-23_7b3e70122f6155edb422e339edac3d89_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 95KB
- Sample260723-j98fssthpg
- SHA256 b5325abbfd55d7d9c2eba086a878c818425b519b6266ffb5f5bf46b870f50dd7
- MD5 7b3e70122f6155edb422e339edac3d89
- SHA1 07ca80d81210d9b5a12aa4ca8053a18c4fc5e96f
- SHA512 d6cd7300e575793443e8a9f23088a0a5872ae834f3eddb7e99d1758d189fe1f04d8cc1433686cdeae379f9561c392ab90673c72737bd181d6b95e656c2a690f9
- SSDEEP 1536:4Cd+qitb0bt+FTCQ2j9EvHsdX+u1X20n2eN6wrr0MR+q:H4b0hR9EE1+u1X2q2e3r2q
- TLSH T1C893F7347AD58532D33BCAB546F782CA7A36B6222D06971E61CA43450C33FA1DD79B0E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-23_7b3e70122f6155edb422e339edac3d89_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-23_7b3e70122f6155edb422e339edac3d89_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 95KB
- SHA256 b5325abbfd55d7d9c2eba086a878c818425b519b6266ffb5f5bf46b870f50dd7
- MD5 7b3e70122f6155edb422e339edac3d89
- SHA1 07ca80d81210d9b5a12aa4ca8053a18c4fc5e96f
- SHA512 d6cd7300e575793443e8a9f23088a0a5872ae834f3eddb7e99d1758d189fe1f04d8cc1433686cdeae379f9561c392ab90673c72737bd181d6b95e656c2a690f9
- SSDEEP 1536:4Cd+qitb0bt+FTCQ2j9EvHsdX+u1X20n2eN6wrr0MR+q:H4b0hR9EE1+u1X2q2e3r2q
- TLSH T1C893F7347AD58532D33BCAB546F782CA7A36B6222D06971E61CA43450C33FA1DD79B0E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE