General
- Target 2026-08-20_f8a271cb1e5ec3bcf22503a7256a32e2_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 97KB
- Sample260820-lbxmracd92
- SHA256 63fa261fcb0edc9d99c95a8604b56e7f25029d7625832d4d1ca92a089c99ceb1
- MD5 f8a271cb1e5ec3bcf22503a7256a32e2
- SHA1 d550aacfa41194e175980b534a9b219c9a631915
- SHA512 c6fb1888185780b5caf9d8ccc85f35dbcfa5168c8b8f5551d67009c3e6dc41650845790c839c6dcb0b92952818de128f2a4fb09f195a9d8958e33027e5c474bc
- SSDEEP 1536:NzUIb25A8ULw005o09WDuYHGjUAsOwRwrXDW:dUIbS5xquYmSOwRl
- TLSH T19CA37C2A7AD18173D233C67554F5C2C7BA37B8267E16CA0F61CA070A4DA3B925D36B0D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-20_f8a271cb1e5ec3bcf22503a7256a32e2_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_f8a271cb1e5ec3bcf22503a7256a32e2_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 97KB
- SHA256 63fa261fcb0edc9d99c95a8604b56e7f25029d7625832d4d1ca92a089c99ceb1
- MD5 f8a271cb1e5ec3bcf22503a7256a32e2
- SHA1 d550aacfa41194e175980b534a9b219c9a631915
- SHA512 c6fb1888185780b5caf9d8ccc85f35dbcfa5168c8b8f5551d67009c3e6dc41650845790c839c6dcb0b92952818de128f2a4fb09f195a9d8958e33027e5c474bc
- SSDEEP 1536:NzUIb25A8ULw005o09WDuYHGjUAsOwRwrXDW:dUIbS5xquYmSOwRl
- TLSH T19CA37C2A7AD18173D233C67554F5C2C7BA37B8267E16CA0F61CA070A4DA3B925D36B0D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE