General
- Target 2026-09-08_dfa229b4d64755a790197c69a1ca7996_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 96KB
- Sample260908-nd9ffax1bw
- SHA256 d2ea8dc34bcb592732016e98cbf382c6ab0f692876df8d1ecdc1924ebb9eb8a0
- MD5 dfa229b4d64755a790197c69a1ca7996
- SHA1 1159cfc8c26a3b34d56f6086d1aae43d4aefe956
- SHA512 3a6ded57e7f0940288a9e11b5287fbfcc087c0de7623f208e2298f50277b86d2c289c38a60d739af2829be4058b12a2efdc0f6877a331f738dc4c88c9f296ff1
- SSDEEP 768:YX5L/v28rbBBAs4efgciryxApKd+CfbjYfou+lt/fFTujSjAsOmqeiir7LfQab5:i/db4Y4yxmCNu+r/tTujUAsOer7LY8
- TLSH T176A37D3575C182B2E33BCB7524B58296A73779356E16C60F62CD0B494D63B90CE3AF0A
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-09-08_dfa229b4d64755a790197c69a1ca7996_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-08_dfa229b4d64755a790197c69a1ca7996_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 96KB
- SHA256 d2ea8dc34bcb592732016e98cbf382c6ab0f692876df8d1ecdc1924ebb9eb8a0
- MD5 dfa229b4d64755a790197c69a1ca7996
- SHA1 1159cfc8c26a3b34d56f6086d1aae43d4aefe956
- SHA512 3a6ded57e7f0940288a9e11b5287fbfcc087c0de7623f208e2298f50277b86d2c289c38a60d739af2829be4058b12a2efdc0f6877a331f738dc4c88c9f296ff1
- SSDEEP 768:YX5L/v28rbBBAs4efgciryxApKd+CfbjYfou+lt/fFTujSjAsOmqeiir7LfQab5:i/db4Y4yxmCNu+r/tTujUAsOer7LY8
- TLSH T176A37D3575C182B2E33BCB7524B58296A73779356E16C60F62CD0B494D63B90CE3AF0A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE