General
- Target 2026-09-04_aaf2765e5f4e89bd9c076b28903c0eb7_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 96KB
- Sample260905-a4scysbb43
- SHA256 f5511472ebf2bbdf833af3da11f5d29962178c7681c7a167337416b9f1604570
- MD5 aaf2765e5f4e89bd9c076b28903c0eb7
- SHA1 fb68c582177d93bffe692251f72b843e7e1093c1
- SHA512 33cfe6dbcb7dbb4aa11a6843b18faf19db1b0e29b52ee258fcd31d8b72afcc25e2e6cff213a7c3702fbf942cfe5638bf638565b451d0be838a2905eb4223fae4
- SSDEEP 1536:4Cd+qitb0bt+FTCQ2j9EvHsdX+u1X20n2eN6wrr0MR+G:H4b0hR9EE1+u1X2q2e3r2G
- TLSH T150A3F6347AD58532D33BCAB546F782CA7A36B6223D06971E61CA43450C23FA1DD79B0E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-09-04_aaf2765e5f4e89bd9c076b28903c0eb7_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-04_aaf2765e5f4e89bd9c076b28903c0eb7_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 96KB
- SHA256 f5511472ebf2bbdf833af3da11f5d29962178c7681c7a167337416b9f1604570
- MD5 aaf2765e5f4e89bd9c076b28903c0eb7
- SHA1 fb68c582177d93bffe692251f72b843e7e1093c1
- SHA512 33cfe6dbcb7dbb4aa11a6843b18faf19db1b0e29b52ee258fcd31d8b72afcc25e2e6cff213a7c3702fbf942cfe5638bf638565b451d0be838a2905eb4223fae4
- SSDEEP 1536:4Cd+qitb0bt+FTCQ2j9EvHsdX+u1X20n2eN6wrr0MR+G:H4b0hR9EE1+u1X2q2e3r2G
- TLSH T150A3F6347AD58532D33BCAB546F782CA7A36B6223D06971E61CA43450C23FA1DD79B0E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE