General
- Target 2026-10-26_c7f10384eb18a4da7d0ab84d990df7b1_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 95KB
- Sample261027-htmzgsb16m
- SHA256 58c3cc814dc82cc18eb417a594d91cda9c5bf05e108a9711ca01cd4693f15865
- MD5 c7f10384eb18a4da7d0ab84d990df7b1
- SHA1 b807e48c7aa4df67aa475e3780ac9566162e8dc1
- SHA512 c4eb46c8e513232ac367897eeb52a25569ce1e436a15039daed4931b0f4e90b612375123b14ee4a68bfc8f8c08a886d218e2ae17d74e78a818216306922111ee
- SSDEEP 1536:NzUIb25A8ULw005o09WDuYHGjUAsOwRD1ifq:dUIbS5xquYmSOwRxR
- TLSH T13B936D2579C286B3D233C67154F6C3C3AA27F936AA26CA1F61CE070A5D937911D26F0D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-10-26_c7f10384eb18a4da7d0ab84d990df7b1_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260911-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-26_c7f10384eb18a4da7d0ab84d990df7b1_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 95KB
- SHA256 58c3cc814dc82cc18eb417a594d91cda9c5bf05e108a9711ca01cd4693f15865
- MD5 c7f10384eb18a4da7d0ab84d990df7b1
- SHA1 b807e48c7aa4df67aa475e3780ac9566162e8dc1
- SHA512 c4eb46c8e513232ac367897eeb52a25569ce1e436a15039daed4931b0f4e90b612375123b14ee4a68bfc8f8c08a886d218e2ae17d74e78a818216306922111ee
- SSDEEP 1536:NzUIb25A8ULw005o09WDuYHGjUAsOwRD1ifq:dUIbS5xquYmSOwRxR
- TLSH T13B936D2579C286B3D233C67154F6C3C3AA27F936AA26CA1F61CE070A5D937911D26F0D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE