General
- Target 2026-09-05_98faea4fd0784d5eba91103902f8b08e_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 96KB
- Sample260907-nf95rahk4v
- SHA256 92756e2e79d92411596e3202627afd6ce3c6bf2442998b3d57d413c1bb059996
- MD5 98faea4fd0784d5eba91103902f8b08e
- SHA1 4b35f25bf5a30ee39f5454673cdc81a8d868034b
- SHA512 59c5a27687df61147ab08237739847a0f33adc6b86cd0633587de95eabb3a360f35f47b14dfc469d3baa736f5e9fb4d563d841229af374d8dbc0e70dd99b070a
- SSDEEP 768:qX5L/v28rbBBAs4efgciryxApKd+CfbjYfou+lt/fFTujSjAsOmqeiir7L8q:A/db4Y4yxmCNu+r/tTujUAsOer7L8q
- TLSH T15BA37C2576C182B2E33BCB7564F58297A73278352E16C60F62CD4B494D63A908E36F0A
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-09-05_98faea4fd0784d5eba91103902f8b08e_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-05_98faea4fd0784d5eba91103902f8b08e_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 96KB
- SHA256 92756e2e79d92411596e3202627afd6ce3c6bf2442998b3d57d413c1bb059996
- MD5 98faea4fd0784d5eba91103902f8b08e
- SHA1 4b35f25bf5a30ee39f5454673cdc81a8d868034b
- SHA512 59c5a27687df61147ab08237739847a0f33adc6b86cd0633587de95eabb3a360f35f47b14dfc469d3baa736f5e9fb4d563d841229af374d8dbc0e70dd99b070a
- SSDEEP 768:qX5L/v28rbBBAs4efgciryxApKd+CfbjYfou+lt/fFTujSjAsOmqeiir7L8q:A/db4Y4yxmCNu+r/tTujUAsOer7L8q
- TLSH T15BA37C2576C182B2E33BCB7564F58297A73278352E16C60F62CD4B494D63A908E36F0A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE