General
- Target 2026-08-05_3829e8ab03b7c48a9a683a551beb365f_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 97KB
- Sample260805-hwj1ls1end
- SHA256 7141c58299a57c8120f11849170af8137d3a67278f8204024ea7dfb70f144c9d
- MD5 3829e8ab03b7c48a9a683a551beb365f
- SHA1 ed791057e2d720d7ad55195516a7c601761f1477
- SHA512 9202927121ee27de5b37cb11044408174078c700bba812bba1d703134d1189b08d7bc5e984256e36da65c7ef75f841c6aec5868eb0b1e53c8450fad281929d91
- SSDEEP 1536:NzUIb25A8ULw005o09WDuYHGjUAsOwRwrXDU:dUIbS5xquYmSOwRD
- TLSH T139A37D2A7AD18173D233C67554F5C2C7BA37B8267E16CA0F61CA070A4DA3B925D36B0D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-05_3829e8ab03b7c48a9a683a551beb365f_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-05_3829e8ab03b7c48a9a683a551beb365f_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 97KB
- SHA256 7141c58299a57c8120f11849170af8137d3a67278f8204024ea7dfb70f144c9d
- MD5 3829e8ab03b7c48a9a683a551beb365f
- SHA1 ed791057e2d720d7ad55195516a7c601761f1477
- SHA512 9202927121ee27de5b37cb11044408174078c700bba812bba1d703134d1189b08d7bc5e984256e36da65c7ef75f841c6aec5868eb0b1e53c8450fad281929d91
- SSDEEP 1536:NzUIb25A8ULw005o09WDuYHGjUAsOwRwrXDU:dUIbS5xquYmSOwRD
- TLSH T139A37D2A7AD18173D233C67554F5C2C7BA37B8267E16CA0F61CA070A4DA3B925D36B0D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE