General
- Target 2026-08-07_048696ada2419f9ad2e4d89fa07d3c10_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 95KB
- Sample260807-y88shack6t
- SHA256 3a4a29b6c76ef79bf90cf2f3056d5618df02bb1976eba4a387212ecb8555526d
- MD5 048696ada2419f9ad2e4d89fa07d3c10
- SHA1 cf176d81607153de2100cbffcb52a8bc9940bb4e
- SHA512 fa7316a7c1a986daa51e449502da436df7be87efa727fafb564cb4631cb1460f25291553b56435db51866508c34fcfb0b92afb8f1b93b585f61e6af6ba5c18fb
- SSDEEP 1536:NzUIb25A8ULw005o09WDuYHGjUAsOwRD1ik:dUIbS5xquYmSOwRxD
- TLSH T1E8A36D2579C286B3D633C67154F6C3C3AA23F926BA16CA1F61CE070A5DA37911D26A0D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-07_048696ada2419f9ad2e4d89fa07d3c10_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-07_048696ada2419f9ad2e4d89fa07d3c10_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 95KB
- SHA256 3a4a29b6c76ef79bf90cf2f3056d5618df02bb1976eba4a387212ecb8555526d
- MD5 048696ada2419f9ad2e4d89fa07d3c10
- SHA1 cf176d81607153de2100cbffcb52a8bc9940bb4e
- SHA512 fa7316a7c1a986daa51e449502da436df7be87efa727fafb564cb4631cb1460f25291553b56435db51866508c34fcfb0b92afb8f1b93b585f61e6af6ba5c18fb
- SSDEEP 1536:NzUIb25A8ULw005o09WDuYHGjUAsOwRD1ik:dUIbS5xquYmSOwRxD
- TLSH T1E8A36D2579C286B3D633C67154F6C3C3AA23F926BA16CA1F61CE070A5DA37911D26A0D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE