General
- Target 2026-08-22_bd630fbb215005ada365d6e40ab37483_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 95KB
- Sample260823-bs1evsdl6s
- SHA256 c6c59cd3f2ee59cb5a3d1eff2761a02b0f88a4e9ff6ae2edbd6ea16a2b8ed77d
- MD5 bd630fbb215005ada365d6e40ab37483
- SHA1 267876213ed37844436ad9f18e9d89c2b3baea8e
- SHA512 15f45aa9c61697f1c6d11b078210331703f03eaa22cfffb15a72c9deef6342e5bf4d3a17f57abfae8151f5c2520e739554329b1b7df64dc5b6b3eebf0925c76c
- SSDEEP 1536:4Cd+qitb0bt+FTCQ2j9EvHsdX+u1X20n2eN6wrr0MR+y:H4b0hR9EE1+u1X2q2e3r2y
- TLSH T1B3A3F7347AD58532D33BCAB546F782CA7A36B6222D06971E61CA43450C33FA1DD79B0E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-22_bd630fbb215005ada365d6e40ab37483_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-22_bd630fbb215005ada365d6e40ab37483_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 95KB
- SHA256 c6c59cd3f2ee59cb5a3d1eff2761a02b0f88a4e9ff6ae2edbd6ea16a2b8ed77d
- MD5 bd630fbb215005ada365d6e40ab37483
- SHA1 267876213ed37844436ad9f18e9d89c2b3baea8e
- SHA512 15f45aa9c61697f1c6d11b078210331703f03eaa22cfffb15a72c9deef6342e5bf4d3a17f57abfae8151f5c2520e739554329b1b7df64dc5b6b3eebf0925c76c
- SSDEEP 1536:4Cd+qitb0bt+FTCQ2j9EvHsdX+u1X20n2eN6wrr0MR+y:H4b0hR9EE1+u1X2q2e3r2y
- TLSH T1B3A3F7347AD58532D33BCAB546F782CA7A36B6222D06971E61CA43450C33FA1DD79B0E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE