General
- Target 2026-08-07_c3108efd1461b8c1a61f69b1429f5b9f_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 103KB
- Sample260808-a17cpswfpa
- SHA256 fe186bf11839fa11c9d30af6ee6a806716771abed5d3fab6d598147fa58e63ab
- MD5 c3108efd1461b8c1a61f69b1429f5b9f
- SHA1 5daca1b4525563d577fbb79bd37dd68ae37cba73
- SHA512 5d48da2b755516896aa21bdaf5b0d8bdaad817e288ade64ed6538c5c57a9985f66e6986691ad3693486c5cecf368c2c5007d78baa5cc510ff3f5d03e82983c77
- SSDEEP 768:PX5L/v28rbBBAs4efgciryxApKd+CfbMYfou+lt/fFTujSjAsOmqeiirxxD3F:h/db4Y4yxmCGu+r/tTujUAsOer3D1
- TLSH T119A36D2575C182B2D237C73515F5C297A7337C356E26C60F62CD4B4A4EA3B909E3AB0A
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-07_c3108efd1461b8c1a61f69b1429f5b9f_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-07_c3108efd1461b8c1a61f69b1429f5b9f_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 103KB
- SHA256 fe186bf11839fa11c9d30af6ee6a806716771abed5d3fab6d598147fa58e63ab
- MD5 c3108efd1461b8c1a61f69b1429f5b9f
- SHA1 5daca1b4525563d577fbb79bd37dd68ae37cba73
- SHA512 5d48da2b755516896aa21bdaf5b0d8bdaad817e288ade64ed6538c5c57a9985f66e6986691ad3693486c5cecf368c2c5007d78baa5cc510ff3f5d03e82983c77
- SSDEEP 768:PX5L/v28rbBBAs4efgciryxApKd+CfbMYfou+lt/fFTujSjAsOmqeiirxxD3F:h/db4Y4yxmCGu+r/tTujUAsOer3D1
- TLSH T119A36D2575C182B2D237C73515F5C297A7337C356E26C60F62CD4B4A4EA3B909E3AB0A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE