General
- Target 2026-08-21_aa97a6fe74b3b6f4e06e244768c51948_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 95KB
- Sample260822-j9xpasfp7y
- SHA256 4044c33342d0e2f4d7dfd65b5fb2bcc4a48488c54575d63664b04595220bdfa6
- MD5 aa97a6fe74b3b6f4e06e244768c51948
- SHA1 1b993e93dafa0bb55ac482d2bc565941ecc4a9fc
- SHA512 5df0adcc21cf802bebff3008a59874d21da7114b2af6aad1b483b6e3eff46eb8d1be65ba293ae2b1594818be7472a923ed0c31539412febcb22f962e07e0fccb
- SSDEEP 1536:4Cd+qitb0bt+FTCQ2j9EvHsdX+u1X20n2eN6wrr0MR+/:H4b0hR9EE1+u1X2q2e3r2/
- TLSH T12B93F7347AD58532D33BCAB546F782CA7A36B6222D06971E61CA43450C33FA1DD79B0E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-21_aa97a6fe74b3b6f4e06e244768c51948_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-21_aa97a6fe74b3b6f4e06e244768c51948_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 95KB
- SHA256 4044c33342d0e2f4d7dfd65b5fb2bcc4a48488c54575d63664b04595220bdfa6
- MD5 aa97a6fe74b3b6f4e06e244768c51948
- SHA1 1b993e93dafa0bb55ac482d2bc565941ecc4a9fc
- SHA512 5df0adcc21cf802bebff3008a59874d21da7114b2af6aad1b483b6e3eff46eb8d1be65ba293ae2b1594818be7472a923ed0c31539412febcb22f962e07e0fccb
- SSDEEP 1536:4Cd+qitb0bt+FTCQ2j9EvHsdX+u1X20n2eN6wrr0MR+/:H4b0hR9EE1+u1X2q2e3r2/
- TLSH T12B93F7347AD58532D33BCAB546F782CA7A36B6222D06971E61CA43450C33FA1DD79B0E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE