General
- Target 2026-08-21_9f18d0d15a63ca25dd10869ae9e81c4d_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 98KB
- Sample260822-k9vqdashmb
- SHA256 ad8278ef27b3e37400ff8eee6f641d57bf239578ab6e3db10c2858e398bbf2d6
- MD5 9f18d0d15a63ca25dd10869ae9e81c4d
- SHA1 b2b4e3a66cfe172556521ecb01b7fb98668f6f88
- SHA512 fbc0017c74b1f3919b75d4dc544a0681384902fb7e2d426ecb89c0cd7121c67b5dbf9c006cf36b3b62c82920ded01f85b6a87248b98783a54e20a45ce5ffb303
- SSDEEP 768:dX5L/v28rbBBAs4efgciryxApKd+CfbjYfou+lt/fFTujSjAsOmqeiir7L+G:7/db4Y4yxmCNu+r/tTujUAsOer7Lx
- TLSH T1CCA36C2576D182B2E33BCB7514F5C296A73678362E16C60F61CD4B494D63B90CE36F0A
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-21_9f18d0d15a63ca25dd10869ae9e81c4d_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-21_9f18d0d15a63ca25dd10869ae9e81c4d_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 98KB
- SHA256 ad8278ef27b3e37400ff8eee6f641d57bf239578ab6e3db10c2858e398bbf2d6
- MD5 9f18d0d15a63ca25dd10869ae9e81c4d
- SHA1 b2b4e3a66cfe172556521ecb01b7fb98668f6f88
- SHA512 fbc0017c74b1f3919b75d4dc544a0681384902fb7e2d426ecb89c0cd7121c67b5dbf9c006cf36b3b62c82920ded01f85b6a87248b98783a54e20a45ce5ffb303
- SSDEEP 768:dX5L/v28rbBBAs4efgciryxApKd+CfbjYfou+lt/fFTujSjAsOmqeiir7L+G:7/db4Y4yxmCNu+r/tTujUAsOer7Lx
- TLSH T1CCA36C2576D182B2E33BCB7514F5C296A73678362E16C60F61CD4B494D63B90CE36F0A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE