General
- Target 2026-07-28_1344a4b9aca8272b6cbeaf3222b8974c_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 94KB
- Sample260728-xvj2jsfp8v
- SHA256 650c510a657afa61dd70e4fc8d1ce20ad33c498b75d31f6ff93edc2633c460fa
- MD5 1344a4b9aca8272b6cbeaf3222b8974c
- SHA1 f909598ae40e763d2aed02f15e13affdd0a4ee24
- SHA512 c2faca53270f7f456f9d3b72050a2e778929ed02a588c8cd39023625c9c306f1aa2823347cfb918860d04398a3b0d76aa55cd40d04fe3e92330f0d8bdafaf0df
- SSDEEP 1536:4Cd+qitb0bt+FTCQ2j9EvHsdX+u1X20n2eN6wrr0MR+P:H4b0hR9EE1+u1X2q2e3r2P
- TLSH T1D69307347AD58532D33BCAB546F782CA7A36B6223D0A971E61CA43450C33B91DD79B0E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-28_1344a4b9aca8272b6cbeaf3222b8974c_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-28_1344a4b9aca8272b6cbeaf3222b8974c_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 94KB
- SHA256 650c510a657afa61dd70e4fc8d1ce20ad33c498b75d31f6ff93edc2633c460fa
- MD5 1344a4b9aca8272b6cbeaf3222b8974c
- SHA1 f909598ae40e763d2aed02f15e13affdd0a4ee24
- SHA512 c2faca53270f7f456f9d3b72050a2e778929ed02a588c8cd39023625c9c306f1aa2823347cfb918860d04398a3b0d76aa55cd40d04fe3e92330f0d8bdafaf0df
- SSDEEP 1536:4Cd+qitb0bt+FTCQ2j9EvHsdX+u1X20n2eN6wrr0MR+P:H4b0hR9EE1+u1X2q2e3r2P
- TLSH T1D69307347AD58532D33BCAB546F782CA7A36B6223D0A971E61CA43450C33B91DD79B0E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE