General
- Target 2026-10-26_8776a71e79872ce08f88502feb64d001_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 95KB
- Sample261027-pycsmsdz5p
- SHA256 e7271a19d2d41524885bfc176b7b104f5ae9ac39db04c1d8402128e46cafa7f1
- MD5 8776a71e79872ce08f88502feb64d001
- SHA1 ef6b879b9da137f4f7e7d11b16709113b8cb4738
- SHA512 27ca8dfbb6ec72505c1348b6ee95b5b5b2c7909336c7be40dcbc30dfbee8676f956952391fa7e772ef41aeb32f42aba094f0dec693a5d8b230c446be6df26fd5
- SSDEEP 768:bX5L/v28rbBBAs4efgciryxApKd+CfbjYfou+lt/fFTujSjAsOmqeiir6VQAC:t/db4Y4yxmCNu+r/tTujUAsOer6VfC
- TLSH T192A36C2679C182B2D237C73554F5C297A73378752E26C60F62CD0B494E63B909E3AB0E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-10-26_8776a71e79872ce08f88502feb64d001_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260911-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-26_8776a71e79872ce08f88502feb64d001_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 95KB
- SHA256 e7271a19d2d41524885bfc176b7b104f5ae9ac39db04c1d8402128e46cafa7f1
- MD5 8776a71e79872ce08f88502feb64d001
- SHA1 ef6b879b9da137f4f7e7d11b16709113b8cb4738
- SHA512 27ca8dfbb6ec72505c1348b6ee95b5b5b2c7909336c7be40dcbc30dfbee8676f956952391fa7e772ef41aeb32f42aba094f0dec693a5d8b230c446be6df26fd5
- SSDEEP 768:bX5L/v28rbBBAs4efgciryxApKd+CfbjYfou+lt/fFTujSjAsOmqeiir6VQAC:t/db4Y4yxmCNu+r/tTujUAsOer6VfC
- TLSH T192A36C2679C182B2D237C73554F5C297A73378752E26C60F62CD0B494E63B909E3AB0E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE