General
- Target 2026-08-13_205e04682f18debd7ae6ee44e9e2c8a7_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 97KB
- Sample260813-mcwbrafl4y
- SHA256 02a1bc1416586e6904acb07e903be181abeb74abe36f652be83c2e9a6c4f71c0
- MD5 205e04682f18debd7ae6ee44e9e2c8a7
- SHA1 970030dafcfb61d88d8ea7dc2a8d758d8b8562d9
- SHA512 ed579291f5ad3cda97fd723ee9f5d13731f76e6ac44f76bb05ddade25a2fe517e731ed88ca4177026db286159312e23dbc1bed3ed76c52dc867553bd2acbb109
- SSDEEP 768:dX5L/v28rbBBAs4efgciryxApKd+CfbjYfou+lt/fFTujSjAsOmqeiir7L+9:7/db4Y4yxmCNu+r/tTujUAsOer7LC
- TLSH T11DA36C357AC182B2E33BCB7524F58296A73679352E16C60F61CD4B494D63A90CE36F0A
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-13_205e04682f18debd7ae6ee44e9e2c8a7_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-13_205e04682f18debd7ae6ee44e9e2c8a7_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 97KB
- SHA256 02a1bc1416586e6904acb07e903be181abeb74abe36f652be83c2e9a6c4f71c0
- MD5 205e04682f18debd7ae6ee44e9e2c8a7
- SHA1 970030dafcfb61d88d8ea7dc2a8d758d8b8562d9
- SHA512 ed579291f5ad3cda97fd723ee9f5d13731f76e6ac44f76bb05ddade25a2fe517e731ed88ca4177026db286159312e23dbc1bed3ed76c52dc867553bd2acbb109
- SSDEEP 768:dX5L/v28rbBBAs4efgciryxApKd+CfbjYfou+lt/fFTujSjAsOmqeiir7L+9:7/db4Y4yxmCNu+r/tTujUAsOer7LC
- TLSH T11DA36C357AC182B2E33BCB7524F58296A73679352E16C60F61CD4B494D63A90CE36F0A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE