General
- Target 2026-08-15_05db6c74bbc7a34ce71cd9d3aa1df42c_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 104KB
- Sample260815-tfc3xazbmg
- SHA256 f2b3425eb537d4ae3302578120eca3eab0f0f920490dab3d02664907abf3f45b
- MD5 05db6c74bbc7a34ce71cd9d3aa1df42c
- SHA1 818901e2188eea89f7f8aff62d2f5f8ef412428d
- SHA512 82fe07b9813e3b8197c3fe66b793dabad0522e03b534c36ea84e0000c3c4565aee0dfd75dc7aa1e7c8fa7a6a92f1e2cc9c0e11227d07a0f10d530a8e284cab63
- SSDEEP 768:PX5L/v28rbBBAs4efgciryxApKd+CfbMYfou+lt/fFTujSjAsOmqeiirxxD3f:h/db4Y4yxmCGu+r/tTujUAsOer3Dv
- TLSH T1F0A37D2575C182B2D237C73515F5C297A7337C356E26C60F62CD4B4A4EA3B909E3AB0A
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-15_05db6c74bbc7a34ce71cd9d3aa1df42c_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-15_05db6c74bbc7a34ce71cd9d3aa1df42c_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 104KB
- SHA256 f2b3425eb537d4ae3302578120eca3eab0f0f920490dab3d02664907abf3f45b
- MD5 05db6c74bbc7a34ce71cd9d3aa1df42c
- SHA1 818901e2188eea89f7f8aff62d2f5f8ef412428d
- SHA512 82fe07b9813e3b8197c3fe66b793dabad0522e03b534c36ea84e0000c3c4565aee0dfd75dc7aa1e7c8fa7a6a92f1e2cc9c0e11227d07a0f10d530a8e284cab63
- SSDEEP 768:PX5L/v28rbBBAs4efgciryxApKd+CfbMYfou+lt/fFTujSjAsOmqeiirxxD3f:h/db4Y4yxmCGu+r/tTujUAsOer3Dv
- TLSH T1F0A37D2575C182B2D237C73515F5C297A7337C356E26C60F62CD4B4A4EA3B909E3AB0A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE