General
- Target 2026-10-25_95b7fa3fd3e421bce1ddd28952ed236a_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 97KB
- Sample261026-x3ef2avy9l
- SHA256 371aa98fa0e84b8e46e4fb11fd4ba1f78bafb2a9e165e2f39db99d6f0015b059
- MD5 95b7fa3fd3e421bce1ddd28952ed236a
- SHA1 fd1f7b0b0e154591411b987f1fceb5885b8d47af
- SHA512 883f6eb1d3f12279e581f26e17af7e5a6e7e7b24df135c79ca6e6663f1455669354e6afd01b0c8ad970a0b31ef1ddd9e2e2d4beba6d36ff14c6379cbf7cd95d1
- SSDEEP 768:qX5L/v28rbBBAs4efgciryxApKd+CfbjYfou+lt/fFTujSjAsOmqeiir7L8nh:A/db4Y4yxmCNu+r/tTujUAsOer7L8h
- TLSH T1C3A37C3576C182B2E33BCB7564F58296A73678352E16C60F62CD4B494D63A90CE36F0A
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-10-25_95b7fa3fd3e421bce1ddd28952ed236a_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260911-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-25_95b7fa3fd3e421bce1ddd28952ed236a_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 97KB
- SHA256 371aa98fa0e84b8e46e4fb11fd4ba1f78bafb2a9e165e2f39db99d6f0015b059
- MD5 95b7fa3fd3e421bce1ddd28952ed236a
- SHA1 fd1f7b0b0e154591411b987f1fceb5885b8d47af
- SHA512 883f6eb1d3f12279e581f26e17af7e5a6e7e7b24df135c79ca6e6663f1455669354e6afd01b0c8ad970a0b31ef1ddd9e2e2d4beba6d36ff14c6379cbf7cd95d1
- SSDEEP 768:qX5L/v28rbBBAs4efgciryxApKd+CfbjYfou+lt/fFTujSjAsOmqeiir7L8nh:A/db4Y4yxmCNu+r/tTujUAsOer7L8h
- TLSH T1C3A37C3576C182B2E33BCB7564F58296A73678352E16C60F62CD4B494D63A90CE36F0A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE