General
- Target 2026-09-12_e3ab86266f34abc96f85d2d07af00689_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 97KB
- Sample260912-tbx8aaeb75
- SHA256 58106ae0f143eb69bf19c9a65221808f7bc46a905be64a7b2493aefac17fdf44
- MD5 e3ab86266f34abc96f85d2d07af00689
- SHA1 356c0feef10c3d9cfcf81131475c4491301e300f
- SHA512 726a782525796b314b8e5b1c4d529900d96f2f539ba3b17cab970486969fb09bd29e39ac51eb718766a3efa46e25b1138f009f1a12fca554c0361fb4bc0463fe
- SSDEEP 768:dX5L/v28rbBBAs4efgciryxApKd+CfbjYfou+lt/fFTujSjAsOmqeiir7LXK:7/db4Y4yxmCNu+r/tTujUAsOer7LXK
- TLSH T18AA37C3576D182B2E33BCB7524F48296A73678352E16C60F62CD4B494D63B90CE36F0A
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-09-12_e3ab86266f34abc96f85d2d07af00689_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260911-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-12_e3ab86266f34abc96f85d2d07af00689_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 97KB
- SHA256 58106ae0f143eb69bf19c9a65221808f7bc46a905be64a7b2493aefac17fdf44
- MD5 e3ab86266f34abc96f85d2d07af00689
- SHA1 356c0feef10c3d9cfcf81131475c4491301e300f
- SHA512 726a782525796b314b8e5b1c4d529900d96f2f539ba3b17cab970486969fb09bd29e39ac51eb718766a3efa46e25b1138f009f1a12fca554c0361fb4bc0463fe
- SSDEEP 768:dX5L/v28rbBBAs4efgciryxApKd+CfbjYfou+lt/fFTujSjAsOmqeiir7LXK:7/db4Y4yxmCNu+r/tTujUAsOer7LXK
- TLSH T18AA37C3576D182B2E33BCB7524F48296A73678352E16C60F62CD4B494D63B90CE36F0A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE