General
- Target 2026-09-23_a96cb2b5895ed6a3f5613ad479581947_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 96KB
- Sample260923-x398psware
- SHA256 e22bdebe4e98fec08919d7f4a7736d17fafbb6a025e189473a277ab408efdead
- MD5 a96cb2b5895ed6a3f5613ad479581947
- SHA1 1174a0150a8ecae02fc35538749d6a4432f9b2c2
- SHA512 62d0bf6ee6e90d732fbda3cc2ed544654762e71849fd720abe5c61fb0f22ad50d19ba963428af7df6d08d0fa632cb137df7f4960e793aec0b49173bc60c4329f
- SSDEEP 1536:4Cd+qitb0bt+FTCQ2j9EvHsdX+u1X20n2eN6wrr0MR+V:H4b0hR9EE1+u1X2q2e3r2V
- TLSH T1C2A3F7347AD58532D33BCAB546F782CA7A36B6222D06971E51CA43450C33FA1DD79B0E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-09-23_a96cb2b5895ed6a3f5613ad479581947_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260911-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-23_a96cb2b5895ed6a3f5613ad479581947_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 96KB
- SHA256 e22bdebe4e98fec08919d7f4a7736d17fafbb6a025e189473a277ab408efdead
- MD5 a96cb2b5895ed6a3f5613ad479581947
- SHA1 1174a0150a8ecae02fc35538749d6a4432f9b2c2
- SHA512 62d0bf6ee6e90d732fbda3cc2ed544654762e71849fd720abe5c61fb0f22ad50d19ba963428af7df6d08d0fa632cb137df7f4960e793aec0b49173bc60c4329f
- SSDEEP 1536:4Cd+qitb0bt+FTCQ2j9EvHsdX+u1X20n2eN6wrr0MR+V:H4b0hR9EE1+u1X2q2e3r2V
- TLSH T1C2A3F7347AD58532D33BCAB546F782CA7A36B6222D06971E51CA43450C33FA1DD79B0E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE