General
- Target 2026-08-04_04c8defca2c0bc13a657b6c302aae580_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 103KB
- Sample260804-khjh2a1vbv
- SHA256 9c8d2d189d746e8a84bebb42e0ecae576954e6b9fc11e26d1915f78523531f4a
- MD5 04c8defca2c0bc13a657b6c302aae580
- SHA1 80a9d510bdbdeec49bedbf8db5486a3306c0ba85
- SHA512 c959103a2a36e3e1a61aaaa3f6c5b18e4d686b2e5c91c603d0ef1c358b5deff9323cc112beed4e903ba337941ceff83b04b74e0b27dd830bd96dde8408f1c51b
- SSDEEP 768:PX5L/v28rbBBAs4efgciryxApKd+CfbMYfou+lt/fFTujSjAsOmqeiirxxD3K:h/db4Y4yxmCGu+r/tTujUAsOer3Da
- TLSH T1E1A36D2575C182B2D237C73515B5C297A7337C356E26C60F62CD4B4A4EA3B909E3AB0E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-04_04c8defca2c0bc13a657b6c302aae580_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_04c8defca2c0bc13a657b6c302aae580_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 103KB
- SHA256 9c8d2d189d746e8a84bebb42e0ecae576954e6b9fc11e26d1915f78523531f4a
- MD5 04c8defca2c0bc13a657b6c302aae580
- SHA1 80a9d510bdbdeec49bedbf8db5486a3306c0ba85
- SHA512 c959103a2a36e3e1a61aaaa3f6c5b18e4d686b2e5c91c603d0ef1c358b5deff9323cc112beed4e903ba337941ceff83b04b74e0b27dd830bd96dde8408f1c51b
- SSDEEP 768:PX5L/v28rbBBAs4efgciryxApKd+CfbMYfou+lt/fFTujSjAsOmqeiirxxD3K:h/db4Y4yxmCGu+r/tTujUAsOer3Da
- TLSH T1E1A36D2575C182B2D237C73515B5C297A7337C356E26C60F62CD4B4A4EA3B909E3AB0E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE