General
- Target 2026-08-12_68ffbdd8b957c861510c88d8d34dfd8f_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 104KB
- Sample260812-e6m88syepg
- SHA256 c8ef58232033dafcea437803e5fd27e9398af314269e8b3d18894cbd8f739cc1
- MD5 68ffbdd8b957c861510c88d8d34dfd8f
- SHA1 48084982b7a86282ec79947cd1bdd8667ed81dce
- SHA512 1d6bd4dadd2cf06b910db55132a827f8598957945d3afd83caf6c5d4d2d77df5a0d73a2d8bfb9d64bb13075d0f3c0519198fe7398612657eb8416967ec39edcd
- SSDEEP 768:PX5L/v28rbBBAs4efgciryxApKd+CfbMYfou+lt/fFTujSjAsOmqeiirxxD3q:h/db4Y4yxmCGu+r/tTujUAsOer3D6
- TLSH T141A37D2575C182B2D237C73525F5C297A6337C356E26C60F62CD4B4A4E63B909E3AB0A
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-12_68ffbdd8b957c861510c88d8d34dfd8f_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-12_68ffbdd8b957c861510c88d8d34dfd8f_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 104KB
- SHA256 c8ef58232033dafcea437803e5fd27e9398af314269e8b3d18894cbd8f739cc1
- MD5 68ffbdd8b957c861510c88d8d34dfd8f
- SHA1 48084982b7a86282ec79947cd1bdd8667ed81dce
- SHA512 1d6bd4dadd2cf06b910db55132a827f8598957945d3afd83caf6c5d4d2d77df5a0d73a2d8bfb9d64bb13075d0f3c0519198fe7398612657eb8416967ec39edcd
- SSDEEP 768:PX5L/v28rbBBAs4efgciryxApKd+CfbMYfou+lt/fFTujSjAsOmqeiirxxD3q:h/db4Y4yxmCGu+r/tTujUAsOer3D6
- TLSH T141A37D2575C182B2D237C73525F5C297A6337C356E26C60F62CD4B4A4E63B909E3AB0A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE