General
- Target 2026-09-16_6ec72488afd2c36e8eaf1194f8b5ebeb_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 96KB
- Sample260916-nywebazdjh
- SHA256 bcda7366edba12dc892f37aab92fd5c505bd937d2d15420b0bba804fc5732a03
- MD5 6ec72488afd2c36e8eaf1194f8b5ebeb
- SHA1 b2c7361cd3c058eb4c16b3e0ca97e0189db20169
- SHA512 866fe7f41f57be66d052a9bcf559e660ed866316f6c31c11495c54ae6e5cbef356b75cabcebb53a91fc66c5d32c29d070ad11b9ee01c9af42c4e28fe01f7982a
- SSDEEP 1536:4Cd+qitb0bt+FTCQ2j9EvHsdX+u1X20n2eN6wrr0MR+0:H4b0hR9EE1+u1X2q2e3r20
- TLSH T144A3F6347AD58532D33BCAB54AF782CA7A36B6222D06971E51CA43450C33FA1DD79B0E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-09-16_6ec72488afd2c36e8eaf1194f8b5ebeb_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260911-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-16_6ec72488afd2c36e8eaf1194f8b5ebeb_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 96KB
- SHA256 bcda7366edba12dc892f37aab92fd5c505bd937d2d15420b0bba804fc5732a03
- MD5 6ec72488afd2c36e8eaf1194f8b5ebeb
- SHA1 b2c7361cd3c058eb4c16b3e0ca97e0189db20169
- SHA512 866fe7f41f57be66d052a9bcf559e660ed866316f6c31c11495c54ae6e5cbef356b75cabcebb53a91fc66c5d32c29d070ad11b9ee01c9af42c4e28fe01f7982a
- SSDEEP 1536:4Cd+qitb0bt+FTCQ2j9EvHsdX+u1X20n2eN6wrr0MR+0:H4b0hR9EE1+u1X2q2e3r20
- TLSH T144A3F6347AD58532D33BCAB54AF782CA7A36B6222D06971E51CA43450C33FA1DD79B0E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE