General
- Target 2026-08-24_ff916f36266355c150fcea7ab610be86_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 95KB
- Sample260824-xdmfcabn6v
- SHA256 225193524c8fbfed2c797d3e3d7bf67a4de933ea543a74fd6a54547b0cc022b6
- MD5 ff916f36266355c150fcea7ab610be86
- SHA1 a33e8bac74eb40b871fc7939d34286563d15eb13
- SHA512 7754c13d02cf55368fe71082c37c627c7917ea0802d36374ee853fec676a3525340e0da8427483f2b780c3e6da3355bcb8e1a03fb5684c65d063d2e98279fcaa
- SSDEEP 1536:4Cd+qitb0bt+FTCQ2j9EvHsdX+u1X20n2eN6wrr0MR+A:H4b0hR9EE1+u1X2q2e3r2A
- TLSH T18DA3F7347AD58532D33BCAB546F782CA7A36B6223D06971E61CA43450C33BA1DD79B0E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-24_ff916f36266355c150fcea7ab610be86_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-24_ff916f36266355c150fcea7ab610be86_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 95KB
- SHA256 225193524c8fbfed2c797d3e3d7bf67a4de933ea543a74fd6a54547b0cc022b6
- MD5 ff916f36266355c150fcea7ab610be86
- SHA1 a33e8bac74eb40b871fc7939d34286563d15eb13
- SHA512 7754c13d02cf55368fe71082c37c627c7917ea0802d36374ee853fec676a3525340e0da8427483f2b780c3e6da3355bcb8e1a03fb5684c65d063d2e98279fcaa
- SSDEEP 1536:4Cd+qitb0bt+FTCQ2j9EvHsdX+u1X20n2eN6wrr0MR+A:H4b0hR9EE1+u1X2q2e3r2A
- TLSH T18DA3F7347AD58532D33BCAB546F782CA7A36B6223D06971E61CA43450C33BA1DD79B0E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE