General
- Target 2026-08-12_0a6fac39ae04975cc58a142586c4c4de_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 97KB
- Sample260812-edscgsyanf
- SHA256 2501d633d8b31568930adab56c57945ff7445e40dcd30b292352b43d3eb8fbc3
- MD5 0a6fac39ae04975cc58a142586c4c4de
- SHA1 6e51e8a5914c62d24c71062d1d155d3bd6f01126
- SHA512 243aad6b83f4976cedc7506dc6e084945609f1b54555f7e61ce19459319d73d5e0368d2d12fd2c28b3d30f4c9311e14606bf8a8dc7039a957136142e53996cb2
- SSDEEP 768:dX5L/v28rbBBAs4efgciryxApKd+CfbjYfou+lt/fFTujSjAsOmqeiir7L+o:7/db4Y4yxmCNu+r/tTujUAsOer7Lb
- TLSH T184A36C357AC182B2E33BCB7524F5C296A73678352E16C60F61CD4B494D63A90CE36F0A
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-12_0a6fac39ae04975cc58a142586c4c4de_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-12_0a6fac39ae04975cc58a142586c4c4de_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 97KB
- SHA256 2501d633d8b31568930adab56c57945ff7445e40dcd30b292352b43d3eb8fbc3
- MD5 0a6fac39ae04975cc58a142586c4c4de
- SHA1 6e51e8a5914c62d24c71062d1d155d3bd6f01126
- SHA512 243aad6b83f4976cedc7506dc6e084945609f1b54555f7e61ce19459319d73d5e0368d2d12fd2c28b3d30f4c9311e14606bf8a8dc7039a957136142e53996cb2
- SSDEEP 768:dX5L/v28rbBBAs4efgciryxApKd+CfbjYfou+lt/fFTujSjAsOmqeiir7L+o:7/db4Y4yxmCNu+r/tTujUAsOer7Lb
- TLSH T184A36C357AC182B2E33BCB7524F5C296A73678352E16C60F61CD4B494D63A90CE36F0A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE