General
- Target 2026-08-01_3a0c006d83c0125f6184c65dc007f670_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 94KB
- Sample260801-rdjfsscj5x
- SHA256 d25337a417b336515f18a91ef3f05ab434e1c07c4d03e03d59c7d95b9f0ee2c6
- MD5 3a0c006d83c0125f6184c65dc007f670
- SHA1 f76485b2a7a224ca72e35dddcdabf3ee5aa3805e
- SHA512 248eb7da6d99fa33d9570cf54fdc3c477af494287151b9081b94075065903646687edb712a505f215f9705db82f6934d897f12b38b06eead34fe622d795f569e
- SSDEEP 1536:4Cd+qitb0bt+FTCQ2j9EvHsdX+u1X20n2eN6wrr0MR+eG:H4b0hR9EE1+u1X2q2e3r2X
- TLSH T1CC93F7347AD58532D33BCAB546F782CB7A36B6223D06971E61CA43450C23BA1DD79B0E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-01_3a0c006d83c0125f6184c65dc007f670_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-01_3a0c006d83c0125f6184c65dc007f670_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 94KB
- SHA256 d25337a417b336515f18a91ef3f05ab434e1c07c4d03e03d59c7d95b9f0ee2c6
- MD5 3a0c006d83c0125f6184c65dc007f670
- SHA1 f76485b2a7a224ca72e35dddcdabf3ee5aa3805e
- SHA512 248eb7da6d99fa33d9570cf54fdc3c477af494287151b9081b94075065903646687edb712a505f215f9705db82f6934d897f12b38b06eead34fe622d795f569e
- SSDEEP 1536:4Cd+qitb0bt+FTCQ2j9EvHsdX+u1X20n2eN6wrr0MR+eG:H4b0hR9EE1+u1X2q2e3r2X
- TLSH T1CC93F7347AD58532D33BCAB546F782CB7A36B6223D06971E61CA43450C23BA1DD79B0E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE