General
- Target 2026-09-08_d30e6925ba7339700b367032c8537d50_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 103KB
- Sample260908-nx4pasap3w
- SHA256 f0d722111c59730aeb4786ad176e58b4b6691fda4789de693207ec0f3a5a0568
- MD5 d30e6925ba7339700b367032c8537d50
- SHA1 e088a4c50372411ed93c4171d0670f414f8e49e8
- SHA512 fe8298866be9ee1eb0ece70678ffe60a000dec2c38b164e9e4fba9fffb3b31cc635fb5ecda7db2248b21e681f5a5e5756c12bc7e42508301bb505285bfde0846
- SSDEEP 768:PX5L/v28rbBBAs4efgciryxApKd+CfbMYfou+lt/fFTujSjAsOmqeiirxxD3c:h/db4Y4yxmCGu+r/tTujUAsOer3Ds
- TLSH T1A7A37D2575C182B2D237C73515F5C297A7337C356E26C60F62CD0B4A4EA3B909E3AB0A
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-09-08_d30e6925ba7339700b367032c8537d50_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-08_d30e6925ba7339700b367032c8537d50_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 103KB
- SHA256 f0d722111c59730aeb4786ad176e58b4b6691fda4789de693207ec0f3a5a0568
- MD5 d30e6925ba7339700b367032c8537d50
- SHA1 e088a4c50372411ed93c4171d0670f414f8e49e8
- SHA512 fe8298866be9ee1eb0ece70678ffe60a000dec2c38b164e9e4fba9fffb3b31cc635fb5ecda7db2248b21e681f5a5e5756c12bc7e42508301bb505285bfde0846
- SSDEEP 768:PX5L/v28rbBBAs4efgciryxApKd+CfbMYfou+lt/fFTujSjAsOmqeiirxxD3c:h/db4Y4yxmCGu+r/tTujUAsOer3Ds
- TLSH T1A7A37D2575C182B2D237C73515F5C297A7337C356E26C60F62CD0B4A4EA3B909E3AB0A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE