General
- Target 2026-08-09_736622cc242b0430dd316fc49090df3d_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 94KB
- Sample260809-3xsdla1vez
- SHA256 481db1fe99f02995a7be5eaba8800f6930b0adef020965f3b2ffe8f18abee1d6
- MD5 736622cc242b0430dd316fc49090df3d
- SHA1 57b07bfe20fc30ef3f0d24f6fea3296b212c9424
- SHA512 b089f461bb4c721c4463f3016587aba6e5e728b9c50c5941c00ba41eb075ec0a3ace682f804a3993e419151240351984db8d8e0308329e912dc0daa272e4cfdc
- SSDEEP 1536:4Cd+qitb0bt+FTCQ2j9EvHsdX+u1X20n2eN6wrr0MR+10:H4b0hR9EE1+u1X2q2e3r210
- TLSH T19F9307347AD58532D33BCAB546F782CB7A36B6223D0A971E61CA43450C23B91DD79B0E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-09_736622cc242b0430dd316fc49090df3d_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_736622cc242b0430dd316fc49090df3d_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 94KB
- SHA256 481db1fe99f02995a7be5eaba8800f6930b0adef020965f3b2ffe8f18abee1d6
- MD5 736622cc242b0430dd316fc49090df3d
- SHA1 57b07bfe20fc30ef3f0d24f6fea3296b212c9424
- SHA512 b089f461bb4c721c4463f3016587aba6e5e728b9c50c5941c00ba41eb075ec0a3ace682f804a3993e419151240351984db8d8e0308329e912dc0daa272e4cfdc
- SSDEEP 1536:4Cd+qitb0bt+FTCQ2j9EvHsdX+u1X20n2eN6wrr0MR+10:H4b0hR9EE1+u1X2q2e3r210
- TLSH T19F9307347AD58532D33BCAB546F782CB7A36B6223D0A971E61CA43450C23B91DD79B0E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE