General
- Target 2026-07-27_7955ed9e95e0a735f979fbee13aeb164_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 95KB
- Sample260727-brwqaafp4s
- SHA256 e5a87100c6c3e78582d9b8f5ab62db2e0908efa5425b61061877c2e6aee72359
- MD5 7955ed9e95e0a735f979fbee13aeb164
- SHA1 e77f7bfef68f80be5cdc616cc40331a4466e227a
- SHA512 bf63a8e61037698bd25d4eb6b736ec8ac65da8e1f5ecefc341f35cb3248f118034f68b2f8a47c49fe021bfa09d7ef5ec6dc4f348e514f00d04c66ff25d0d27b4
- SSDEEP 1536:4Cd+qitb0bt+FTCQ2j9EvHsdX+u1X20n2eN6wrr0MR+5:H4b0hR9EE1+u1X2q2e3r25
- TLSH T19EA3F7347AD58532D33BCAB546F782CA7A36B6223D06971E61CA43450C23FA1DD79B0E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-27_7955ed9e95e0a735f979fbee13aeb164_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-27_7955ed9e95e0a735f979fbee13aeb164_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 95KB
- SHA256 e5a87100c6c3e78582d9b8f5ab62db2e0908efa5425b61061877c2e6aee72359
- MD5 7955ed9e95e0a735f979fbee13aeb164
- SHA1 e77f7bfef68f80be5cdc616cc40331a4466e227a
- SHA512 bf63a8e61037698bd25d4eb6b736ec8ac65da8e1f5ecefc341f35cb3248f118034f68b2f8a47c49fe021bfa09d7ef5ec6dc4f348e514f00d04c66ff25d0d27b4
- SSDEEP 1536:4Cd+qitb0bt+FTCQ2j9EvHsdX+u1X20n2eN6wrr0MR+5:H4b0hR9EE1+u1X2q2e3r25
- TLSH T19EA3F7347AD58532D33BCAB546F782CA7A36B6223D06971E61CA43450C23FA1DD79B0E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE