General
- Target 2026-08-18_d83ec7498875dab2920af51d64c0b1b8_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 98KB
- Sample260818-fdxsmswdra
- SHA256 cae0363908c0892fdc6f8809f5b1e74b77e9d1b78906c82b47bda84a621647bd
- MD5 d83ec7498875dab2920af51d64c0b1b8
- SHA1 f9c84f1e1d0fa2d26077f185eee2a32f51d7b701
- SHA512 a475ddd3980e87063c8d3aa36d5867a172e2de662f0bda2cb58ca7d72d0cf6e285e66a46c3ed2a7bb44f6160556f48499b46742d0f5264666b5127d89d74ca0a
- SSDEEP 1536:NzUIb25A8ULw005o09WDuYHGjUAsOwRwrXD1:dUIbS5xquYmSOwR2
- TLSH T17FA36B257AD18173D333C67558F682C7BA37B8267E16CA0F61CA070A4DA3B925D36B0D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-18_d83ec7498875dab2920af51d64c0b1b8_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-18_d83ec7498875dab2920af51d64c0b1b8_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 98KB
- SHA256 cae0363908c0892fdc6f8809f5b1e74b77e9d1b78906c82b47bda84a621647bd
- MD5 d83ec7498875dab2920af51d64c0b1b8
- SHA1 f9c84f1e1d0fa2d26077f185eee2a32f51d7b701
- SHA512 a475ddd3980e87063c8d3aa36d5867a172e2de662f0bda2cb58ca7d72d0cf6e285e66a46c3ed2a7bb44f6160556f48499b46742d0f5264666b5127d89d74ca0a
- SSDEEP 1536:NzUIb25A8ULw005o09WDuYHGjUAsOwRwrXD1:dUIbS5xquYmSOwR2
- TLSH T17FA36B257AD18173D333C67558F682C7BA37B8267E16CA0F61CA070A4DA3B925D36B0D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE