General
- Target 2026-08-05_748553c5bbd6ec83ff84bbed45359ade_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 91KB
- Sample260805-gmsqqazbqa
- SHA256 52bbe66922b6527bb9a62ba53e60899708c56702a28a5e8aa13f24d5f158f33e
- MD5 748553c5bbd6ec83ff84bbed45359ade
- SHA1 b744c3e2241a0d56c53da624513c891c31ca198f
- SHA512 cab1fa57a27d17360da0cd28c834acd79f3e22ff1863e9fc5c82b63346106738eb77f850dd8857b273274d349a729dcd5a7f91595853c96b251af9b1823e42b5
- SSDEEP 1536:4Cd+qitb0bt+FTCQ2j9EvHsdX+u1X20n2eN6wrr0MRq:H4b0hR9EE1+u1X2q2e3rC
- TLSH T1CD9328347AD58432D33BCAB549F7C2CB7A36B6223D1A971E61CA43450D23B91AD3970E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-05_748553c5bbd6ec83ff84bbed45359ade_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-05_748553c5bbd6ec83ff84bbed45359ade_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 91KB
- SHA256 52bbe66922b6527bb9a62ba53e60899708c56702a28a5e8aa13f24d5f158f33e
- MD5 748553c5bbd6ec83ff84bbed45359ade
- SHA1 b744c3e2241a0d56c53da624513c891c31ca198f
- SHA512 cab1fa57a27d17360da0cd28c834acd79f3e22ff1863e9fc5c82b63346106738eb77f850dd8857b273274d349a729dcd5a7f91595853c96b251af9b1823e42b5
- SSDEEP 1536:4Cd+qitb0bt+FTCQ2j9EvHsdX+u1X20n2eN6wrr0MRq:H4b0hR9EE1+u1X2q2e3rC
- TLSH T1CD9328347AD58432D33BCAB549F7C2CB7A36B6223D1A971E61CA43450D23B91AD3970E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE