General
- Target 2026-07-27_5650fa86bb4e32a347aa798bf6710656_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 95KB
- Sample260727-a6jhtstwfv
- SHA256 167faee16c3a4cb18021d3d15781ec02335a247c5cb5258404bc9fab04b817dd
- MD5 5650fa86bb4e32a347aa798bf6710656
- SHA1 8b9182f69e6bbec570547a156d538ce080f19724
- SHA512 f512eaf21174893c8298bd4ef61170b6bc9278843e4cc7d81eccb7e5c03b38b481587106e0884e1a30c47c9a2db183879b7461675db17b7ab0cddd9a1fac007a
- SSDEEP 1536:4Cd+qitb0bt+FTCQ2j9EvHsdX+u1X20n2eN6wrr0MR+Q:H4b0hR9EE1+u1X2q2e3r2Q
- TLSH T1CD93F7347AD58532D33BCAB546F782CA7A36B6222D06971E61CA43450C33FA1DD79B0E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-27_5650fa86bb4e32a347aa798bf6710656_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-27_5650fa86bb4e32a347aa798bf6710656_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 95KB
- SHA256 167faee16c3a4cb18021d3d15781ec02335a247c5cb5258404bc9fab04b817dd
- MD5 5650fa86bb4e32a347aa798bf6710656
- SHA1 8b9182f69e6bbec570547a156d538ce080f19724
- SHA512 f512eaf21174893c8298bd4ef61170b6bc9278843e4cc7d81eccb7e5c03b38b481587106e0884e1a30c47c9a2db183879b7461675db17b7ab0cddd9a1fac007a
- SSDEEP 1536:4Cd+qitb0bt+FTCQ2j9EvHsdX+u1X20n2eN6wrr0MR+Q:H4b0hR9EE1+u1X2q2e3r2Q
- TLSH T1CD93F7347AD58532D33BCAB546F782CA7A36B6222D06971E61CA43450C33FA1DD79B0E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE