General
- Target 2026-08-02_c0ecba7fe211f1fe596399321ca6a612_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 97KB
- Sample260802-gac5hatvgz
- SHA256 8f90e1759468814c224d6cf168f994cf8af131b07a103ab851db72ebd7566564
- MD5 c0ecba7fe211f1fe596399321ca6a612
- SHA1 11439f7b5883bbf9c4253a8720e202b9a9fb4810
- SHA512 6c4da456f5bb31756cc11a7d145041d248c78318908f3c99d1d32a2c03ae6f5727663403b47438626408a8a64dd38ae26636b29a3fb507e197b492aab101c617
- SSDEEP 768:dX5L/v28rbBBAs4efgciryxApKd+CfbjYfou+lt/fFTujSjAsOmqeiir7L+P:7/db4Y4yxmCNu+r/tTujUAsOer7Ls
- TLSH T159A37C3576C182B2E33BCB7525F5C296A736B8352E16C60F61CD4B494D63A90CE36F0A
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-02_c0ecba7fe211f1fe596399321ca6a612_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_c0ecba7fe211f1fe596399321ca6a612_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 97KB
- SHA256 8f90e1759468814c224d6cf168f994cf8af131b07a103ab851db72ebd7566564
- MD5 c0ecba7fe211f1fe596399321ca6a612
- SHA1 11439f7b5883bbf9c4253a8720e202b9a9fb4810
- SHA512 6c4da456f5bb31756cc11a7d145041d248c78318908f3c99d1d32a2c03ae6f5727663403b47438626408a8a64dd38ae26636b29a3fb507e197b492aab101c617
- SSDEEP 768:dX5L/v28rbBBAs4efgciryxApKd+CfbjYfou+lt/fFTujSjAsOmqeiir7L+P:7/db4Y4yxmCNu+r/tTujUAsOer7Ls
- TLSH T159A37C3576C182B2E33BCB7525F5C296A736B8352E16C60F61CD4B494D63A90CE36F0A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE