General
- Target 2026-08-04_7ff592f27c51169de18d69046f1d572f_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 103KB
- Sample260804-hdsvssx1ex
- SHA256 8125365a60fd49a2d7a124e71b77c8d09a2542d9540274309972964c3d11036e
- MD5 7ff592f27c51169de18d69046f1d572f
- SHA1 ffb5a30b7684289c935821ece8331eebef9c592e
- SHA512 6ed084720c4b39333a7af37c6952fb0e02f4db6565fc5f4185a71080999f73e6f9b84c7174ce396b790fe874cd45251ce5413a276ab15a689418b1296181c7e9
- SSDEEP 768:PX5L/v28rbBBAs4efgciryxApKd+CfbMYfou+lt/fFTujSjAsOmqeiirxxD3K:h/db4Y4yxmCGu+r/tTujUAsOer3D6
- TLSH T102A36D2675C181B2D237C73514F5C297A6337C756E26C61F62CD4B4A4EA3B809E3AB0E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-04_7ff592f27c51169de18d69046f1d572f_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_7ff592f27c51169de18d69046f1d572f_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 103KB
- SHA256 8125365a60fd49a2d7a124e71b77c8d09a2542d9540274309972964c3d11036e
- MD5 7ff592f27c51169de18d69046f1d572f
- SHA1 ffb5a30b7684289c935821ece8331eebef9c592e
- SHA512 6ed084720c4b39333a7af37c6952fb0e02f4db6565fc5f4185a71080999f73e6f9b84c7174ce396b790fe874cd45251ce5413a276ab15a689418b1296181c7e9
- SSDEEP 768:PX5L/v28rbBBAs4efgciryxApKd+CfbMYfou+lt/fFTujSjAsOmqeiirxxD3K:h/db4Y4yxmCGu+r/tTujUAsOer3D6
- TLSH T102A36D2675C181B2D237C73514F5C297A6337C756E26C61F62CD4B4A4EA3B809E3AB0E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE