General
- Target 2026-09-13_f6eea695fb19fc45247a4aa3541420a6_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 97KB
- Sample260913-j8jfaahb52
- SHA256 5894829588cdcc0bdfea0d8b921ab8aa8c3177e2c2594e32cda418f8625806dd
- MD5 f6eea695fb19fc45247a4aa3541420a6
- SHA1 7ec8fe7f348d6a70a9ca497e19ed27e04a3e2342
- SHA512 97f210c218ddaf15d3385c8e230b32e58daf14f3c0cae6a1d4e3e30c5819758565d736ac625f9d13d921e63987916797e2efdfa726bea589e21f1514c9f3eda5
- SSDEEP 1536:NzUIb25A8ULw005o09WDuYHGjUAsOwRwrXDe:dUIbS5xquYmSOwRl
- TLSH T124A37C297AD18173D233C67554F5C2C7BA37B8267E16CA0F61CA070A4DA3B925D36B0D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-09-13_f6eea695fb19fc45247a4aa3541420a6_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260911-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-13_f6eea695fb19fc45247a4aa3541420a6_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 97KB
- SHA256 5894829588cdcc0bdfea0d8b921ab8aa8c3177e2c2594e32cda418f8625806dd
- MD5 f6eea695fb19fc45247a4aa3541420a6
- SHA1 7ec8fe7f348d6a70a9ca497e19ed27e04a3e2342
- SHA512 97f210c218ddaf15d3385c8e230b32e58daf14f3c0cae6a1d4e3e30c5819758565d736ac625f9d13d921e63987916797e2efdfa726bea589e21f1514c9f3eda5
- SSDEEP 1536:NzUIb25A8ULw005o09WDuYHGjUAsOwRwrXDe:dUIbS5xquYmSOwRl
- TLSH T124A37C297AD18173D233C67554F5C2C7BA37B8267E16CA0F61CA070A4DA3B925D36B0D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE