General
- Target 2026-08-22_8b2cfa23c5f8d43cbca381557154ca19_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 95KB
- Sample260823-fxlvgsshpc
- SHA256 0d76dafb65e19b6a32e06dc155c7f5ce2cb67f6a6b85635eb14b41e79b848345
- MD5 8b2cfa23c5f8d43cbca381557154ca19
- SHA1 74080aa2c326f6b3632e972af8a23d34f1e8eecd
- SHA512 45d6a153907a3bf0c2ec778d27ef2fc966957ec80a29154c1c3992b6d48a82191552c458bba0fb6413501239f476ad299966698b3bc35dc041f2c0ee2ba5ba33
- SSDEEP 768:/X5L/v28rbBBAs4efgciryxApKd+CfbjYfou+lt/fFTujSjAsOmqeiir7Lgh:R/db4Y4yxmCNu+r/tTujUAsOer7LC
- TLSH T18EA38D2575C182B2E33BCB7524F5C297A73779356E16C60F62CD4B494D636808E3AF0A
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-22_8b2cfa23c5f8d43cbca381557154ca19_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-22_8b2cfa23c5f8d43cbca381557154ca19_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 95KB
- SHA256 0d76dafb65e19b6a32e06dc155c7f5ce2cb67f6a6b85635eb14b41e79b848345
- MD5 8b2cfa23c5f8d43cbca381557154ca19
- SHA1 74080aa2c326f6b3632e972af8a23d34f1e8eecd
- SHA512 45d6a153907a3bf0c2ec778d27ef2fc966957ec80a29154c1c3992b6d48a82191552c458bba0fb6413501239f476ad299966698b3bc35dc041f2c0ee2ba5ba33
- SSDEEP 768:/X5L/v28rbBBAs4efgciryxApKd+CfbjYfou+lt/fFTujSjAsOmqeiir7Lgh:R/db4Y4yxmCNu+r/tTujUAsOer7LC
- TLSH T18EA38D2575C182B2E33BCB7524F5C297A73779356E16C60F62CD4B494D636808E3AF0A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE