General
- Target 2026-08-04_31768b29ea14ef7bf248c5f6d78ce01c_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 97KB
- Sample260804-tqhfdade54
- SHA256 5456b93b46c9eb064fd04340e6ccb80e323d42c9504a07a0920987137c690def
- MD5 31768b29ea14ef7bf248c5f6d78ce01c
- SHA1 ecb65e5b0063f635e47b26a182ac5865fb62b2f1
- SHA512 9433f99fb1d2416ee5a861594caa96a890cfefb008b8643a2083972a2b5747f7abc7c211979e277f656756441c559af6c7ce000b7a4bc889085dd5bac9b18912
- SSDEEP 768:dX5L/v28rbBBAs4efgciryxApKd+CfbjYfou+lt/fFTujSjAsOmqeiir7L+m7J:7/db4Y4yxmCNu+r/tTujUAsOer7LP1
- TLSH T192A37C357AC182B2E33BCB7564F58296A73678352E16C60F61CD4B494D63B90CE36F0A
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-04_31768b29ea14ef7bf248c5f6d78ce01c_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_31768b29ea14ef7bf248c5f6d78ce01c_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 97KB
- SHA256 5456b93b46c9eb064fd04340e6ccb80e323d42c9504a07a0920987137c690def
- MD5 31768b29ea14ef7bf248c5f6d78ce01c
- SHA1 ecb65e5b0063f635e47b26a182ac5865fb62b2f1
- SHA512 9433f99fb1d2416ee5a861594caa96a890cfefb008b8643a2083972a2b5747f7abc7c211979e277f656756441c559af6c7ce000b7a4bc889085dd5bac9b18912
- SSDEEP 768:dX5L/v28rbBBAs4efgciryxApKd+CfbjYfou+lt/fFTujSjAsOmqeiir7L+m7J:7/db4Y4yxmCNu+r/tTujUAsOer7LP1
- TLSH T192A37C357AC182B2E33BCB7564F58296A73678352E16C60F61CD4B494D63B90CE36F0A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE