General
- Target 2026-10-22_09c7f4c74b3c541a52991a991541d5d3_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 91KB
- Sample261024-18773scx4x
- SHA256 b07fa22ff8e2f805afca914c5ed2f4bfda6e75f42f8d5c81e4427159e2bed3c9
- MD5 09c7f4c74b3c541a52991a991541d5d3
- SHA1 7b33fbf4ce82ecd848f8a55fc517719ce227d464
- SHA512 37897517da64c1b9f3dd72458f3cd686756ab0f85cb67f6fce70caa41d551d90912d81e7ea0141b850085e99ee1a18de801484030c5e44157c1e798c3ac13c31
- SSDEEP 1536:4Cd+qitb0bt+FTCQ2j9EvHsdX+u1X20n2eN6wrr0MRO8T:H4b0hR9EE1+u1X2q2e3r9
- TLSH T1959318347AD58532D33BCAB545F782CA7A36B6223D0A971E61CA43450D33B91ED39B0E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-10-22_09c7f4c74b3c541a52991a991541d5d3_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260911-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-22_09c7f4c74b3c541a52991a991541d5d3_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 91KB
- SHA256 b07fa22ff8e2f805afca914c5ed2f4bfda6e75f42f8d5c81e4427159e2bed3c9
- MD5 09c7f4c74b3c541a52991a991541d5d3
- SHA1 7b33fbf4ce82ecd848f8a55fc517719ce227d464
- SHA512 37897517da64c1b9f3dd72458f3cd686756ab0f85cb67f6fce70caa41d551d90912d81e7ea0141b850085e99ee1a18de801484030c5e44157c1e798c3ac13c31
- SSDEEP 1536:4Cd+qitb0bt+FTCQ2j9EvHsdX+u1X20n2eN6wrr0MRO8T:H4b0hR9EE1+u1X2q2e3r9
- TLSH T1959318347AD58532D33BCAB545F782CA7A36B6223D0A971E61CA43450D33B91ED39B0E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE