General
- Target 2026-08-19_4b73409797d1a52c9347cc3c0dff38ef_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 97KB
- Sample260819-2w5f4aab23
- SHA256 c16d493bb4d19dd050acaa43f2e8b5d706fffaff8755592362a972a65a882c47
- MD5 4b73409797d1a52c9347cc3c0dff38ef
- SHA1 e60efecfbaf0207b1f0519283e2ab2be04ae6bfc
- SHA512 fbdea40bc664e32fc96adc2a584f279d4659c344fbcf8a709c623d4db6940fc6bb108c75da8ada285186ab03096800ce893d889a26feed216a65b8163b9f6031
- SSDEEP 768:dX5L/v28rbBBAs4efgciryxApKd+CfbjYfou+lt/fFTujSjAsOmqeiir7L+mQ:7/db4Y4yxmCNu+r/tTujUAsOer7LC
- TLSH T1E9A37C3576D182B2E33BCB7524F5C296A736B8352E16C60F61CD4B494D63A90CE36F0A
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-19_4b73409797d1a52c9347cc3c0dff38ef_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-19_4b73409797d1a52c9347cc3c0dff38ef_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 97KB
- SHA256 c16d493bb4d19dd050acaa43f2e8b5d706fffaff8755592362a972a65a882c47
- MD5 4b73409797d1a52c9347cc3c0dff38ef
- SHA1 e60efecfbaf0207b1f0519283e2ab2be04ae6bfc
- SHA512 fbdea40bc664e32fc96adc2a584f279d4659c344fbcf8a709c623d4db6940fc6bb108c75da8ada285186ab03096800ce893d889a26feed216a65b8163b9f6031
- SSDEEP 768:dX5L/v28rbBBAs4efgciryxApKd+CfbjYfou+lt/fFTujSjAsOmqeiir7L+mQ:7/db4Y4yxmCNu+r/tTujUAsOer7LC
- TLSH T1E9A37C3576D182B2E33BCB7524F5C296A736B8352E16C60F61CD4B494D63A90CE36F0A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE