General
- Target 2026-07-28_e562f590c341e60793213974b722c694_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 97KB
- Sample260728-csptssxsbz
- SHA256 0541e978abce06d2e6bbd66a06af2ea1d6ee991e2678f2c005279ea3c9d31507
- MD5 e562f590c341e60793213974b722c694
- SHA1 23274ec1d17a70d2b117c3a56fc041e77cc9da13
- SHA512 15a86ef774b6a31da8658ee71833cbbd7ca404a230431569324b34519f81188168c41dd6fdd15cb9c8f6de7cc6973d6f7f5cc6b07d3b0e73e0ebcedbec9419ff
- SSDEEP 768:dX5L/v28rbBBAs4efgciryxApKd+CfbjYfou+lt/fFTujSjAsOmqeiir7L+cD:7/db4Y4yxmCNu+r/tTujUAsOer7LL
- TLSH T1D0A36C357AC182B2E33BCB7524F58296A73678352E16C60F61CD4B494D63B90CE36F0A
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-28_e562f590c341e60793213974b722c694_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-28_e562f590c341e60793213974b722c694_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 97KB
- SHA256 0541e978abce06d2e6bbd66a06af2ea1d6ee991e2678f2c005279ea3c9d31507
- MD5 e562f590c341e60793213974b722c694
- SHA1 23274ec1d17a70d2b117c3a56fc041e77cc9da13
- SHA512 15a86ef774b6a31da8658ee71833cbbd7ca404a230431569324b34519f81188168c41dd6fdd15cb9c8f6de7cc6973d6f7f5cc6b07d3b0e73e0ebcedbec9419ff
- SSDEEP 768:dX5L/v28rbBBAs4efgciryxApKd+CfbjYfou+lt/fFTujSjAsOmqeiir7L+cD:7/db4Y4yxmCNu+r/tTujUAsOer7LL
- TLSH T1D0A36C357AC182B2E33BCB7524F58296A73678352E16C60F61CD4B494D63B90CE36F0A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE