General
- Target 2026-08-12_6ce8f039c03176bb583ba74acfc9d661_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 103KB
- Sample260812-e6hnrayepc
- SHA256 d1c8f2c1be43e0fe2e23f2339585e1afe5140b923807ba872750a52bb6d62513
- MD5 6ce8f039c03176bb583ba74acfc9d661
- SHA1 5345f93b5649dd4b00a5c5f09899d6bfea3b4576
- SHA512 a2361d7a25750cd929211867500cde45664f49bb2deb091fb8aef6ac0dd4bc7deb6fc23f9f04c99e439bc68cad76cd9bb80275f8266bd7ba599685f9c9e47f2b
- SSDEEP 768:PX5L/v28rbBBAs4efgciryxApKd+CfbMYfou+lt/fFTujSjAsOmqeiirxxD3i:h/db4Y4yxmCGu+r/tTujUAsOer3DS
- TLSH T10DA37D2575C182B2D237C73514F5C297A7377C356E26C60F62CD0B4A4EA3B909E3AB0A
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-12_6ce8f039c03176bb583ba74acfc9d661_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-12_6ce8f039c03176bb583ba74acfc9d661_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 103KB
- SHA256 d1c8f2c1be43e0fe2e23f2339585e1afe5140b923807ba872750a52bb6d62513
- MD5 6ce8f039c03176bb583ba74acfc9d661
- SHA1 5345f93b5649dd4b00a5c5f09899d6bfea3b4576
- SHA512 a2361d7a25750cd929211867500cde45664f49bb2deb091fb8aef6ac0dd4bc7deb6fc23f9f04c99e439bc68cad76cd9bb80275f8266bd7ba599685f9c9e47f2b
- SSDEEP 768:PX5L/v28rbBBAs4efgciryxApKd+CfbMYfou+lt/fFTujSjAsOmqeiirxxD3i:h/db4Y4yxmCGu+r/tTujUAsOer3DS
- TLSH T10DA37D2575C182B2D237C73514F5C297A7377C356E26C60F62CD0B4A4EA3B909E3AB0A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE