General
- Target 2026-08-20_8b104686584dbe100450753b224af0ab_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 98KB
- Sample260820-3wxa6axfrb
- SHA256 52b4c5b27cfd718192515ab8057e297dc37bcafee95a455fcecae7143b0aa999
- MD5 8b104686584dbe100450753b224af0ab
- SHA1 0b7d0870085dac7f4549c88bafbbcf1c674ce39d
- SHA512 cfe5c3311459a9f29f3cbbde0a3764009053c59aa30e68ef8358c3b855b6a368f2909b4dca6df2fae1a308f40f8def89a1a95edbbec669634e44887d2f067388
- SSDEEP 1536:NzUIb25A8ULw005o09WDuYHGjUAsOwRwrXDQ:dUIbS5xquYmSOwRH
- TLSH T187A36B257AD18173D337C67558F682C7BA37B8267E16CA0F61CA070A4CA3B925D36B0D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-20_8b104686584dbe100450753b224af0ab_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_8b104686584dbe100450753b224af0ab_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 98KB
- SHA256 52b4c5b27cfd718192515ab8057e297dc37bcafee95a455fcecae7143b0aa999
- MD5 8b104686584dbe100450753b224af0ab
- SHA1 0b7d0870085dac7f4549c88bafbbcf1c674ce39d
- SHA512 cfe5c3311459a9f29f3cbbde0a3764009053c59aa30e68ef8358c3b855b6a368f2909b4dca6df2fae1a308f40f8def89a1a95edbbec669634e44887d2f067388
- SSDEEP 1536:NzUIb25A8ULw005o09WDuYHGjUAsOwRwrXDQ:dUIbS5xquYmSOwRH
- TLSH T187A36B257AD18173D337C67558F682C7BA37B8267E16CA0F61CA070A4CA3B925D36B0D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Custom signature
UPX dump on OEP (original entry point)
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE