General
- Target 2026-09-12_38bd35cb07f131d09a7865ab4a662458_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 96KB
- Sample260913-d2pe3as1cv
- SHA256 5d751b934cc245a70dfc210309d0e4a127971664af0ac8a4c51e9d00676a72ac
- MD5 38bd35cb07f131d09a7865ab4a662458
- SHA1 652c2e759a65a959319c4e9c420d6752f04006f4
- SHA512 c42f252a54cf519da48200389f2c326a09974155bf33f18d82633810afae79a394503580ee1534f7843cc7bdbbb54ae8866ee333f85ca10b7da02e161df3540a
- SSDEEP 768:qX5L/v28rbBBAs4efgciryxApKd+CfbjYfou+lt/fFTujSjAsOmqeiir7L8K:A/db4Y4yxmCNu+r/tTujUAsOer7L8K
- TLSH T1F1A37C3575C182B2E33BCB7564F58297A73778352E16C60F62CD4B494D63A908E3AF0A
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-09-12_38bd35cb07f131d09a7865ab4a662458_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260911-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-12_38bd35cb07f131d09a7865ab4a662458_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 96KB
- SHA256 5d751b934cc245a70dfc210309d0e4a127971664af0ac8a4c51e9d00676a72ac
- MD5 38bd35cb07f131d09a7865ab4a662458
- SHA1 652c2e759a65a959319c4e9c420d6752f04006f4
- SHA512 c42f252a54cf519da48200389f2c326a09974155bf33f18d82633810afae79a394503580ee1534f7843cc7bdbbb54ae8866ee333f85ca10b7da02e161df3540a
- SSDEEP 768:qX5L/v28rbBBAs4efgciryxApKd+CfbjYfou+lt/fFTujSjAsOmqeiir7L8K:A/db4Y4yxmCNu+r/tTujUAsOer7L8K
- TLSH T1F1A37C3575C182B2E33BCB7564F58297A73778352E16C60F62CD4B494D63A908E3AF0A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE