General
- Target 2026-08-11_70965ae704fdf0e0ce9bf99f1051ca34_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 97KB
- Sample260811-hrym7sdb26
- SHA256 aeda12e0a1e20c8533d8f1a05df05a1232fb4a045bb6b7a4a6eea86f4fa2941e
- MD5 70965ae704fdf0e0ce9bf99f1051ca34
- SHA1 a851828fe7c01bc6e4a62ac0bff78e2113430267
- SHA512 f8a3e5dec0c3804aa8d106fe1da5b4f201dff0458fa59f9db322a363a7e9ca11a22eacda27846a2c238362673b35ced046552d8854481f0f081e0af4cca3d382
- SSDEEP 768:YX5L/v28rbBBAs4efgciryxApKd+CfbjYfou+lt/fFTujSjAsOmqeiir7LfQabJZ:i/db4Y4yxmCNu+r/tTujUAsOer7LYW
- TLSH T1E0A37C257AC182B2E33BCB7524F58296A73778352E16C60F61CD4B494D63B90DE36F0A
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-11_70965ae704fdf0e0ce9bf99f1051ca34_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-11_70965ae704fdf0e0ce9bf99f1051ca34_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 97KB
- SHA256 aeda12e0a1e20c8533d8f1a05df05a1232fb4a045bb6b7a4a6eea86f4fa2941e
- MD5 70965ae704fdf0e0ce9bf99f1051ca34
- SHA1 a851828fe7c01bc6e4a62ac0bff78e2113430267
- SHA512 f8a3e5dec0c3804aa8d106fe1da5b4f201dff0458fa59f9db322a363a7e9ca11a22eacda27846a2c238362673b35ced046552d8854481f0f081e0af4cca3d382
- SSDEEP 768:YX5L/v28rbBBAs4efgciryxApKd+CfbjYfou+lt/fFTujSjAsOmqeiir7LfQabJZ:i/db4Y4yxmCNu+r/tTujUAsOer7LYW
- TLSH T1E0A37C257AC182B2E33BCB7524F58296A73778352E16C60F61CD4B494D63B90DE36F0A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE