General
- Target 2026-08-18_0f1f6998006b65d8b8bc59a4326f7376_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 98KB
- Sample260818-fw5afaen4t
- SHA256 32b8efbcbe830d59311111e2e24daf458a22530fa01f344f6a666c128289aca6
- MD5 0f1f6998006b65d8b8bc59a4326f7376
- SHA1 13327a6fbd80380608021883a5a33ed7ce43bd64
- SHA512 afe248b0bcb52f5cd7c9ae6fe2ba7992b18edba45e9c63d23d5b3d11b41552078c21189505f1170b72bbba2b1e7c2484a84d9ae4102079cf7ef52126fb44b74c
- SSDEEP 1536:NzUIb25A8ULw005o09WDuYHGjUAsOwRwrXDt:dUIbS5xquYmSOwR2
- TLSH T16DA37B257AD18173D333C67558F682C7BA37B8267E16CA0F61CA070A4DA3B925D36B0D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-18_0f1f6998006b65d8b8bc59a4326f7376_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-18_0f1f6998006b65d8b8bc59a4326f7376_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 98KB
- SHA256 32b8efbcbe830d59311111e2e24daf458a22530fa01f344f6a666c128289aca6
- MD5 0f1f6998006b65d8b8bc59a4326f7376
- SHA1 13327a6fbd80380608021883a5a33ed7ce43bd64
- SHA512 afe248b0bcb52f5cd7c9ae6fe2ba7992b18edba45e9c63d23d5b3d11b41552078c21189505f1170b72bbba2b1e7c2484a84d9ae4102079cf7ef52126fb44b74c
- SSDEEP 1536:NzUIb25A8ULw005o09WDuYHGjUAsOwRwrXDt:dUIbS5xquYmSOwR2
- TLSH T16DA37B257AD18173D333C67558F682C7BA37B8267E16CA0F61CA070A4DA3B925D36B0D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE