General
- Target 2026-09-01_31630d27abc54c73fcc6add62e1b6879_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 95KB
- Sample260903-re4hcsvwa1
- SHA256 3a9ebc91592dc533494ae68c520a268e83e476aa3a844698e46fc7cdb42c612d
- MD5 31630d27abc54c73fcc6add62e1b6879
- SHA1 3db3914e058596bdf64df8026c112a8e418cdda0
- SHA512 269036fb699f286153142ac44603199554cfca1a7d030a9b5c466a384002b87370fe6688fb2f83daa9c62b617ac7ce28d42073019bf0bef41cf0111999d190da
- SSDEEP 768:dX5L/v28rbBBAs4efgciryxApKd+CfbjYfou+lt/fFTujSjAsOmqeiir7LR:7/db4Y4yxmCNu+r/tTujUAsOer7LR
- TLSH T104A38D2575C182B2E33BCB7524F5C297A73779352E16C60F62CD4B494D636908E3AF0A
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-09-01_31630d27abc54c73fcc6add62e1b6879_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-01_31630d27abc54c73fcc6add62e1b6879_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 95KB
- SHA256 3a9ebc91592dc533494ae68c520a268e83e476aa3a844698e46fc7cdb42c612d
- MD5 31630d27abc54c73fcc6add62e1b6879
- SHA1 3db3914e058596bdf64df8026c112a8e418cdda0
- SHA512 269036fb699f286153142ac44603199554cfca1a7d030a9b5c466a384002b87370fe6688fb2f83daa9c62b617ac7ce28d42073019bf0bef41cf0111999d190da
- SSDEEP 768:dX5L/v28rbBBAs4efgciryxApKd+CfbjYfou+lt/fFTujSjAsOmqeiir7LR:7/db4Y4yxmCNu+r/tTujUAsOer7LR
- TLSH T104A38D2575C182B2E33BCB7524F5C297A73779352E16C60F62CD4B494D636908E3AF0A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE