General
- Target 2026-10-26_5b6d64a4d86c562a58e57561d696b421_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 92KB
- Sample261027-t5ctfaft7l
- SHA256 64f32d53096752b8ce4824305ffc5b0e3770fc880984c76f75eb5b9b7ff7d5e8
- MD5 5b6d64a4d86c562a58e57561d696b421
- SHA1 b441dfd880b1720cb55d9dcbf6613c2f44d760e7
- SHA512 ed2acb054ff3db86f5091953ef8fcac471837ab1e1991f4e1a9c4ac574d19549dea661be08b3a92170ebb2ddc696dc0de8d0ed24ba3e50d073b07e738e40a187
- SSDEEP 1536:wzUIb25A8ULN005o09WDuYHGjUAsOerqK:mUIbf5xquYmSOerh
- TLSH T103938F2679C2C6B3C523C27154B5C393A723FD7AAA26C71BA6CD0B0A5D937811D36F09
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-10-26_5b6d64a4d86c562a58e57561d696b421_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260911-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-26_5b6d64a4d86c562a58e57561d696b421_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 92KB
- SHA256 64f32d53096752b8ce4824305ffc5b0e3770fc880984c76f75eb5b9b7ff7d5e8
- MD5 5b6d64a4d86c562a58e57561d696b421
- SHA1 b441dfd880b1720cb55d9dcbf6613c2f44d760e7
- SHA512 ed2acb054ff3db86f5091953ef8fcac471837ab1e1991f4e1a9c4ac574d19549dea661be08b3a92170ebb2ddc696dc0de8d0ed24ba3e50d073b07e738e40a187
- SSDEEP 1536:wzUIb25A8ULN005o09WDuYHGjUAsOerqK:mUIbf5xquYmSOerh
- TLSH T103938F2679C2C6B3C523C27154B5C393A723FD7AAA26C71BA6CD0B0A5D937811D36F09
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE