General
- Target 2026-10-22_a66fdac94dace34e29378e30ab931dda_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 97KB
- Sample261024-b6zeqag16p
- SHA256 304a84981b9ac7aea1622b3264db12b280c5c996329a60d321b0c84cd9efa62c
- MD5 a66fdac94dace34e29378e30ab931dda
- SHA1 72069c8298e738b374c16d7799677602ba11729d
- SHA512 d4e66713ab1469964b003634f05882b0bb17ec0ddf7b97020eea29caef4859e2a20765383251c6c1589c5d471661fd3b12bb0a09343091f4e3744fe2e97551a8
- SSDEEP 768:/X5L/v28rbBBAs4efgciryxApKd+CfbjYfou+lt/fFTujSjAsOmqeiir7LgQ:R/db4Y4yxmCNu+r/tTujUAsOer7Lf
- TLSH T181A37D3576C182B2E33BCB7524F58296A73778356E16C60F61CD4B494D63A90CE36F0A
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-10-22_a66fdac94dace34e29378e30ab931dda_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260911-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-22_a66fdac94dace34e29378e30ab931dda_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 97KB
- SHA256 304a84981b9ac7aea1622b3264db12b280c5c996329a60d321b0c84cd9efa62c
- MD5 a66fdac94dace34e29378e30ab931dda
- SHA1 72069c8298e738b374c16d7799677602ba11729d
- SHA512 d4e66713ab1469964b003634f05882b0bb17ec0ddf7b97020eea29caef4859e2a20765383251c6c1589c5d471661fd3b12bb0a09343091f4e3744fe2e97551a8
- SSDEEP 768:/X5L/v28rbBBAs4efgciryxApKd+CfbjYfou+lt/fFTujSjAsOmqeiir7LgQ:R/db4Y4yxmCNu+r/tTujUAsOer7Lf
- TLSH T181A37D3576C182B2E33BCB7524F58296A73778356E16C60F61CD4B494D63A90CE36F0A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE