General
- Target 2026-09-07_7b61b475de288555656a11ec0018bf23_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 96KB
- Sample260908-2d11ysysgz
- SHA256 d9fcb04adb32271c29a503f0b68ba49df95e24479fd995b3d3d8e8831a4d55f8
- MD5 7b61b475de288555656a11ec0018bf23
- SHA1 7dfc2b4681bf2758acc3fdb848787421d2253a3a
- SHA512 f2ea4e39c13d89ac97bd6962feb1b7d9091fb039d2456e67b8943f9ce927b9dcb5b4e1d5fed11a9fe57afb80aa34d95b1ee56660370481494b00e7c1f38ac509
- SSDEEP 768:qX5L/v28rbBBAs4efgciryxApKd+CfbjYfou+lt/fFTujSjAsOmqeiir7L8e:A/db4Y4yxmCNu+r/tTujUAsOer7L8e
- TLSH T172A37C2576C182B2E33BCB7564F58297A73278352E16C60F62CD4B494D63B909E36F0A
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-09-07_7b61b475de288555656a11ec0018bf23_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-07_7b61b475de288555656a11ec0018bf23_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 96KB
- SHA256 d9fcb04adb32271c29a503f0b68ba49df95e24479fd995b3d3d8e8831a4d55f8
- MD5 7b61b475de288555656a11ec0018bf23
- SHA1 7dfc2b4681bf2758acc3fdb848787421d2253a3a
- SHA512 f2ea4e39c13d89ac97bd6962feb1b7d9091fb039d2456e67b8943f9ce927b9dcb5b4e1d5fed11a9fe57afb80aa34d95b1ee56660370481494b00e7c1f38ac509
- SSDEEP 768:qX5L/v28rbBBAs4efgciryxApKd+CfbjYfou+lt/fFTujSjAsOmqeiir7L8e:A/db4Y4yxmCNu+r/tTujUAsOer7L8e
- TLSH T172A37C2576C182B2E33BCB7564F58297A73278352E16C60F62CD4B494D63B909E36F0A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE