General
- Target 2026-08-04_b3a84d6f18959e727cccb637675a2c98_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 96KB
- Sample260804-2clvmszsdw
- SHA256 d8f808d3f2485349733bd8f21d4c2c86c3b0dccb63388df5c960e3b569ea467f
- MD5 b3a84d6f18959e727cccb637675a2c98
- SHA1 8a970305007e43b41bee5bfa37b19978c2aa60f2
- SHA512 a6b4bd185819d219700da73635bcfdf70007902e3985f141d029f021b1ac831693e11926b3773d96cd5c4e770c07cbca131db108ee1eeffb286475f98f760f26
- SSDEEP 1536:NzUIb25A8ULw005o09WDuYHGjUAsOwRwrXDQ:dUIbS5xquYmSOwRn
- TLSH T10EA37C2A7AD18173D233C67554F5C2C7BA37B8267E16CA0F61CA070A4DA3B925D36B0D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-04_b3a84d6f18959e727cccb637675a2c98_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_b3a84d6f18959e727cccb637675a2c98_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 96KB
- SHA256 d8f808d3f2485349733bd8f21d4c2c86c3b0dccb63388df5c960e3b569ea467f
- MD5 b3a84d6f18959e727cccb637675a2c98
- SHA1 8a970305007e43b41bee5bfa37b19978c2aa60f2
- SHA512 a6b4bd185819d219700da73635bcfdf70007902e3985f141d029f021b1ac831693e11926b3773d96cd5c4e770c07cbca131db108ee1eeffb286475f98f760f26
- SSDEEP 1536:NzUIb25A8ULw005o09WDuYHGjUAsOwRwrXDQ:dUIbS5xquYmSOwRn
- TLSH T10EA37C2A7AD18173D233C67554F5C2C7BA37B8267E16CA0F61CA070A4DA3B925D36B0D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE