General
- Target 2026-08-20_51fccaebbc513d9bb08e47655e75db30_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 118KB
- Sample260820-gmsqqatsfz
- SHA256 57a0689885e2fc8ad20a76a443e3c74e8d8df7c0c8293cc61d3c04d17f88c85c
- MD5 51fccaebbc513d9bb08e47655e75db30
- SHA1 27d2a28827657acc533e8062bb3e32b00a3eb7e7
- SHA512 00714474f5f5d02d74572810d93a14b1094a830174245c7cd2577e1fbca948c2b15fc494a998aab16f676555c0ca9efd75a1b99df5ca6cfc3c582574ad66424b
- SSDEEP 1536:t/db4Y4yxmCNu+r/tTujUAsOer7LYj4T9AwbCK:tlbgMu+rRuSOerX7
- TLSH T1DDC3E7387ED55672E37BCAB599F691C6BA36B4223D06990E50CE03440C23F51EEB1B0E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-20_51fccaebbc513d9bb08e47655e75db30_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_51fccaebbc513d9bb08e47655e75db30_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 118KB
- SHA256 57a0689885e2fc8ad20a76a443e3c74e8d8df7c0c8293cc61d3c04d17f88c85c
- MD5 51fccaebbc513d9bb08e47655e75db30
- SHA1 27d2a28827657acc533e8062bb3e32b00a3eb7e7
- SHA512 00714474f5f5d02d74572810d93a14b1094a830174245c7cd2577e1fbca948c2b15fc494a998aab16f676555c0ca9efd75a1b99df5ca6cfc3c582574ad66424b
- SSDEEP 1536:t/db4Y4yxmCNu+r/tTujUAsOer7LYj4T9AwbCK:tlbgMu+rRuSOerX7
- TLSH T1DDC3E7387ED55672E37BCAB599F691C6BA36B4223D06990E50CE03440C23F51EEB1B0E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE