General
- Target 2026-08-02_f23fff6861d94024747ab52c9351889e_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 97KB
- Sample260802-mgsres1aje
- SHA256 bb9b8027930ed654f183ee5291693730e3a04fc356f93b5bcf4de50c4e9a5dba
- MD5 f23fff6861d94024747ab52c9351889e
- SHA1 66f6bf4b70c2ced054d6fc4f34a8b4ce489970a7
- SHA512 36d081b544ba2b2a4fc776710a87a9d98330ae154d6c7f483c67fc34b353d008a1d0165538e67d8aecd4b140aae7f0e71ae69f9ed427de0cc94e883e5c8d5d39
- SSDEEP 768:dX5L/v28rbBBAs4efgciryxApKd+CfbjYfou+lt/fFTujSjAsOmqeiir7L+3:7/db4Y4yxmCNu+r/tTujUAsOer7LU
- TLSH T156A37C2576D182B2E33BCB7524F58296A736B8352E16C60F61CD4B494D63B90CE36F0A
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-02_f23fff6861d94024747ab52c9351889e_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_f23fff6861d94024747ab52c9351889e_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 97KB
- SHA256 bb9b8027930ed654f183ee5291693730e3a04fc356f93b5bcf4de50c4e9a5dba
- MD5 f23fff6861d94024747ab52c9351889e
- SHA1 66f6bf4b70c2ced054d6fc4f34a8b4ce489970a7
- SHA512 36d081b544ba2b2a4fc776710a87a9d98330ae154d6c7f483c67fc34b353d008a1d0165538e67d8aecd4b140aae7f0e71ae69f9ed427de0cc94e883e5c8d5d39
- SSDEEP 768:dX5L/v28rbBBAs4efgciryxApKd+CfbjYfou+lt/fFTujSjAsOmqeiir7L+3:7/db4Y4yxmCNu+r/tTujUAsOer7LU
- TLSH T156A37C2576D182B2E33BCB7524F58296A736B8352E16C60F61CD4B494D63B90CE36F0A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE