General
- Target 2026-08-05_c1558d51d342b09ba82e9394a6680a45_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 100KB
- Sample260805-hkr7vaxtet
- SHA256 fa77c8596e835dbda591e7dcb5e630a324d9fc0cae72b49262d97e3c2a2ea210
- MD5 c1558d51d342b09ba82e9394a6680a45
- SHA1 9356120c5a71d2e587064d7d4c705519e34a68c5
- SHA512 9e066b17611584ab7b9035e80ecf2ee63cc24eaaea0492e7a151c2d0f73672cc2335c2fed70bb2dea03efa7fc7310feab7c5a168c60d40799539c8680d95e634
- SSDEEP 768:bX5L/v28rbBBAs4efgciryxApKd+CfbjYfou+lt/fFTujSjAsOmqeiir6VQTpWgm:t/db4Y4yxmCNu+r/tTujUAsOer6Vwthy
- TLSH T134A34A3979D142B3D33BCB7555F582C7A63278263E26CA0E61CE0B490D63B519E36B0E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-05_c1558d51d342b09ba82e9394a6680a45_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-05_c1558d51d342b09ba82e9394a6680a45_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 100KB
- SHA256 fa77c8596e835dbda591e7dcb5e630a324d9fc0cae72b49262d97e3c2a2ea210
- MD5 c1558d51d342b09ba82e9394a6680a45
- SHA1 9356120c5a71d2e587064d7d4c705519e34a68c5
- SHA512 9e066b17611584ab7b9035e80ecf2ee63cc24eaaea0492e7a151c2d0f73672cc2335c2fed70bb2dea03efa7fc7310feab7c5a168c60d40799539c8680d95e634
- SSDEEP 768:bX5L/v28rbBBAs4efgciryxApKd+CfbjYfou+lt/fFTujSjAsOmqeiir6VQTpWgm:t/db4Y4yxmCNu+r/tTujUAsOer6Vwthy
- TLSH T134A34A3979D142B3D33BCB7555F582C7A63278263E26CA0E61CE0B490D63B519E36B0E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE