General
- Target 2026-08-19_0df9e98aad5a7827fab0039054b507cf_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 97KB
- Sample260819-knt7qa1bnc
- SHA256 1199070f811934065d128d3bbd4a37ad7f5b8c64b3cdcad0fc9ffdc3dd7d7eb8
- MD5 0df9e98aad5a7827fab0039054b507cf
- SHA1 80622a234e8d091c7a9b2baac346d943c4b934b8
- SHA512 d6e6cf2756f98c311dcbbb7870f183397c273ef3477bc30d937335aecf3eb1e85ba72afa40ff7cc7e9b3b824ce6e4eacb9a80e87501b574372096a8b6d00334d
- SSDEEP 768:dX5L/v28rbBBAs4efgciryxApKd+CfbjYfou+lt/fFTujSjAsOmqeiir7L+mvb:7/db4Y4yxmCNu+r/tTujUAsOer7LPvb
- TLSH T13DA37C3576D182B2E33BCB7524F58296A73678352E16C60F62CD4B494D63B90CE36F0A
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-19_0df9e98aad5a7827fab0039054b507cf_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-19_0df9e98aad5a7827fab0039054b507cf_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 97KB
- SHA256 1199070f811934065d128d3bbd4a37ad7f5b8c64b3cdcad0fc9ffdc3dd7d7eb8
- MD5 0df9e98aad5a7827fab0039054b507cf
- SHA1 80622a234e8d091c7a9b2baac346d943c4b934b8
- SHA512 d6e6cf2756f98c311dcbbb7870f183397c273ef3477bc30d937335aecf3eb1e85ba72afa40ff7cc7e9b3b824ce6e4eacb9a80e87501b574372096a8b6d00334d
- SSDEEP 768:dX5L/v28rbBBAs4efgciryxApKd+CfbjYfou+lt/fFTujSjAsOmqeiir7L+mvb:7/db4Y4yxmCNu+r/tTujUAsOer7LPvb
- TLSH T13DA37C3576D182B2E33BCB7524F58296A73678352E16C60F62CD4B494D63B90CE36F0A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE