General
- Target 2026-08-09_32689f0300fe9fb2373c4b76c7d4c4e2_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 94KB
- Sample260809-ypy4ysx1ex
- SHA256 e5b4d7dea749ec40ac897e729b63e878db7fb32c6c92e899e1b741a9bff9b53c
- MD5 32689f0300fe9fb2373c4b76c7d4c4e2
- SHA1 c552e182eb46a61d5c8996425b0c9ff0de22cf1a
- SHA512 ef019914e3b62a8b6720cbfff48813b85f76c06de0ebc07afd707318b699ef0b7b217b295eabe7b3b1d5457159ec57f80e2c8f81cbffa9b4cb59e08020bc8191
- SSDEEP 1536:4Cd+qitb0bt+FTCQ2j9EvHsdX+u1X20n2eN6wrr0MR+1R:H4b0hR9EE1+u1X2q2e3r21R
- TLSH T13B9307347AD58532D33BCAB546F782CB7A36B6223D0A971E61CA43450C23B91DD79B0E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-09_32689f0300fe9fb2373c4b76c7d4c4e2_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_32689f0300fe9fb2373c4b76c7d4c4e2_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 94KB
- SHA256 e5b4d7dea749ec40ac897e729b63e878db7fb32c6c92e899e1b741a9bff9b53c
- MD5 32689f0300fe9fb2373c4b76c7d4c4e2
- SHA1 c552e182eb46a61d5c8996425b0c9ff0de22cf1a
- SHA512 ef019914e3b62a8b6720cbfff48813b85f76c06de0ebc07afd707318b699ef0b7b217b295eabe7b3b1d5457159ec57f80e2c8f81cbffa9b4cb59e08020bc8191
- SSDEEP 1536:4Cd+qitb0bt+FTCQ2j9EvHsdX+u1X20n2eN6wrr0MR+1R:H4b0hR9EE1+u1X2q2e3r21R
- TLSH T13B9307347AD58532D33BCAB546F782CB7A36B6223D0A971E61CA43450C23B91DD79B0E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE