General
- Target 2026-09-06_3fdc346db706759621fec2b12adb71f7_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 96KB
- Sample260907-e77dhacn6w
- SHA256 0107f15b46927e148f523786656993388062eb6b7d793cd558a3b657485e8a97
- MD5 3fdc346db706759621fec2b12adb71f7
- SHA1 aac8dd2c99c4d2e25d907ef6cf5e829f5176200d
- SHA512 081fc420adf59ccfc43360ba85ff34fe8d3375aea95951106b45f2304f6b780412e1c21aa3b8993845c8ee5e38dd23fa1aeffb3d442045cad42d03a26973c35e
- SSDEEP 1536:4Cd+qitb0bt+FTCQ2j9EvHsdX+u1X20n2eN6wrr0MR+u:H4b0hR9EE1+u1X2q2e3r2u
- TLSH T1ADA3F6347AD58532D33BCAB54AF782CA7A36B6222D06971E51CA43450C23FA1DD79B0E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-09-06_3fdc346db706759621fec2b12adb71f7_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-06_3fdc346db706759621fec2b12adb71f7_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 96KB
- SHA256 0107f15b46927e148f523786656993388062eb6b7d793cd558a3b657485e8a97
- MD5 3fdc346db706759621fec2b12adb71f7
- SHA1 aac8dd2c99c4d2e25d907ef6cf5e829f5176200d
- SHA512 081fc420adf59ccfc43360ba85ff34fe8d3375aea95951106b45f2304f6b780412e1c21aa3b8993845c8ee5e38dd23fa1aeffb3d442045cad42d03a26973c35e
- SSDEEP 1536:4Cd+qitb0bt+FTCQ2j9EvHsdX+u1X20n2eN6wrr0MR+u:H4b0hR9EE1+u1X2q2e3r2u
- TLSH T1ADA3F6347AD58532D33BCAB54AF782CA7A36B6222D06971E51CA43450C23FA1DD79B0E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE