General
- Target 2026-09-13_0f3c1448ebef3408c5fce016a6f304d9_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 97KB
- Sample260913-wgen8sttft
- SHA256 66657ac303c207b39fa9ed0dd22daffbfbf4bdab17c616ce3bcb1f8c29f96c13
- MD5 0f3c1448ebef3408c5fce016a6f304d9
- SHA1 57d361460fd45aa69d646082c66c8e91c1b789cc
- SHA512 4b3874276561b4ed83ff0ab46b399e990229990499ab585df495a2fd84589fdfd4ba1af80bcb6477da0d629c1b9ef7672c37c7e5404ba057e40411a09500268e
- SSDEEP 768:qX5L/v28rbBBAs4efgciryxApKd+CfbjYfou+lt/fFTujSjAsOmqeiir7L8O:A/db4Y4yxmCNu+r/tTujUAsOer7L8O
- TLSH T1F5A37C2576C182B2E33BCB7564F58297A73278352E16C60F62CD4B494D63B90CE36F0A
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-09-13_0f3c1448ebef3408c5fce016a6f304d9_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260911-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-13_0f3c1448ebef3408c5fce016a6f304d9_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 97KB
- SHA256 66657ac303c207b39fa9ed0dd22daffbfbf4bdab17c616ce3bcb1f8c29f96c13
- MD5 0f3c1448ebef3408c5fce016a6f304d9
- SHA1 57d361460fd45aa69d646082c66c8e91c1b789cc
- SHA512 4b3874276561b4ed83ff0ab46b399e990229990499ab585df495a2fd84589fdfd4ba1af80bcb6477da0d629c1b9ef7672c37c7e5404ba057e40411a09500268e
- SSDEEP 768:qX5L/v28rbBBAs4efgciryxApKd+CfbjYfou+lt/fFTujSjAsOmqeiir7L8O:A/db4Y4yxmCNu+r/tTujUAsOer7L8O
- TLSH T1F5A37C2576C182B2E33BCB7564F58297A73278352E16C60F62CD4B494D63B90CE36F0A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE