General
- Target 2026-08-04_fad04b4ed946c84c98ba1be96984bbe8_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 103KB
- Sample260804-fe3qaadb83
- SHA256 b5e49fd251ebf95b677b12c216b81d7cd353c49dbad6173f728241022d018ef5
- MD5 fad04b4ed946c84c98ba1be96984bbe8
- SHA1 b1f8dea113098d96fef9487a1239c28c78111101
- SHA512 a98a70ccf1bcf90fbac90fb806e323d4ca7a553e9dad0d7cea3c0a679939ee53d46a205f3891688ab19660c72973e922bd6530e7a14163a9e7c47b6ed3064c79
- SSDEEP 768:PX5L/v28rbBBAs4efgciryxApKd+CfbMYfou+lt/fFTujSjAsOmqeiirxxD3w:h/db4Y4yxmCGu+r/tTujUAsOer3DA
- TLSH T13CA36D2575C182B2D237C73514B5C297A7337C356E26C60F62CD4B4A4EA3B909E3AB0E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-04_fad04b4ed946c84c98ba1be96984bbe8_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_fad04b4ed946c84c98ba1be96984bbe8_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 103KB
- SHA256 b5e49fd251ebf95b677b12c216b81d7cd353c49dbad6173f728241022d018ef5
- MD5 fad04b4ed946c84c98ba1be96984bbe8
- SHA1 b1f8dea113098d96fef9487a1239c28c78111101
- SHA512 a98a70ccf1bcf90fbac90fb806e323d4ca7a553e9dad0d7cea3c0a679939ee53d46a205f3891688ab19660c72973e922bd6530e7a14163a9e7c47b6ed3064c79
- SSDEEP 768:PX5L/v28rbBBAs4efgciryxApKd+CfbMYfou+lt/fFTujSjAsOmqeiirxxD3w:h/db4Y4yxmCGu+r/tTujUAsOer3DA
- TLSH T13CA36D2575C182B2D237C73514B5C297A7337C356E26C60F62CD4B4A4EA3B909E3AB0E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE