General
- Target 2026-08-14_94a4d854e5ee3a6f8d7d696b6f4463d5_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 97KB
- Sample260814-h31lyaxyaz
- SHA256 d4e7b2acb70649361d028c5f52351711b53cf17fd2bbb45f728a792e161acb23
- MD5 94a4d854e5ee3a6f8d7d696b6f4463d5
- SHA1 2ef47653b7bd4f6616c342f89478d675441208e4
- SHA512 923fc6b83a4c67d74783eff45296c344c44488eb8ff2ec853fb6cc9e877c7330d190dfefd211f832d2a1bf6c843a12024758a3555de592c5305a37731f0d7dd4
- SSDEEP 1536:NzUIb25A8ULw005o09WDuYHGjUAsOwRwrXDlT6:dUIbS5xquYmSOwR06
- TLSH T162A36C397AD18173D233C67558F582C7BA37B8267E16CA0F61CA070A4DA3B525D36B0D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-14_94a4d854e5ee3a6f8d7d696b6f4463d5_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-14_94a4d854e5ee3a6f8d7d696b6f4463d5_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 97KB
- SHA256 d4e7b2acb70649361d028c5f52351711b53cf17fd2bbb45f728a792e161acb23
- MD5 94a4d854e5ee3a6f8d7d696b6f4463d5
- SHA1 2ef47653b7bd4f6616c342f89478d675441208e4
- SHA512 923fc6b83a4c67d74783eff45296c344c44488eb8ff2ec853fb6cc9e877c7330d190dfefd211f832d2a1bf6c843a12024758a3555de592c5305a37731f0d7dd4
- SSDEEP 1536:NzUIb25A8ULw005o09WDuYHGjUAsOwRwrXDlT6:dUIbS5xquYmSOwR06
- TLSH T162A36C397AD18173D233C67558F582C7BA37B8267E16CA0F61CA070A4DA3B525D36B0D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE