General
- Target 2026-07-27_c7d13f7c3ef1b04a224041b30c3836c5_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 95KB
- Sample260727-a2pjaatvht
- SHA256 5d3953f278865b8cf183690bd2220df367761f9155043d230bae39f572be6301
- MD5 c7d13f7c3ef1b04a224041b30c3836c5
- SHA1 433a7f5eadfa2f893cf5ab2dfa6818725051cd2b
- SHA512 4eae27b397dd1ef344ede5305fd3d2bd6bbaf3564ee9f95ee85d4976603b3ad22677ffa2cf800fe924c5948556854364298e05d62704642d9caf89678804803a
- SSDEEP 1536:4Cd+qitb0bt+FTCQ2j9EvHsdX+u1X20n2eN6wrr0MR+/:H4b0hR9EE1+u1X2q2e3r2/
- TLSH T148A3F7347AD58532D33BCAB546F782CA7A36B6223D06971E61CA43450C23FA1DD79B0E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-27_c7d13f7c3ef1b04a224041b30c3836c5_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-27_c7d13f7c3ef1b04a224041b30c3836c5_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 95KB
- SHA256 5d3953f278865b8cf183690bd2220df367761f9155043d230bae39f572be6301
- MD5 c7d13f7c3ef1b04a224041b30c3836c5
- SHA1 433a7f5eadfa2f893cf5ab2dfa6818725051cd2b
- SHA512 4eae27b397dd1ef344ede5305fd3d2bd6bbaf3564ee9f95ee85d4976603b3ad22677ffa2cf800fe924c5948556854364298e05d62704642d9caf89678804803a
- SSDEEP 1536:4Cd+qitb0bt+FTCQ2j9EvHsdX+u1X20n2eN6wrr0MR+/:H4b0hR9EE1+u1X2q2e3r2/
- TLSH T148A3F7347AD58532D33BCAB546F782CA7A36B6223D06971E61CA43450C23FA1DD79B0E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE