General
- Target 2026-10-26_4bf068894089d3fdd2c89ade94e58064_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 97KB
- Sample261027-wp71rafy8n
- SHA256 551d2bddf1fd78428bc91dbcaee9700537c56d350921760aa0883e3493615dcd
- MD5 4bf068894089d3fdd2c89ade94e58064
- SHA1 0353eac4e65968f87c8be21fa322f20fad39a01d
- SHA512 51f57755fbe5fe7502a053390b6f7e3ea084a59b624e79f0538dc992701cd7fa7742effb2e3bbaf32a0bf238825f20c3b3ae270848c3e5957569354932817df8
- SSDEEP 768:qX5L/v28rbBBAs4efgciryxApKd+CfbjYfou+lt/fFTujSjAsOmqeiir7L8nZ:A/db4Y4yxmCNu+r/tTujUAsOer7L8Z
- TLSH T151A37C317AC182B2E33BCB7564F58296A73678352E16C60F61CD4B490D63B90CE36F0A
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-10-26_4bf068894089d3fdd2c89ade94e58064_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260911-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-26_4bf068894089d3fdd2c89ade94e58064_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 97KB
- SHA256 551d2bddf1fd78428bc91dbcaee9700537c56d350921760aa0883e3493615dcd
- MD5 4bf068894089d3fdd2c89ade94e58064
- SHA1 0353eac4e65968f87c8be21fa322f20fad39a01d
- SHA512 51f57755fbe5fe7502a053390b6f7e3ea084a59b624e79f0538dc992701cd7fa7742effb2e3bbaf32a0bf238825f20c3b3ae270848c3e5957569354932817df8
- SSDEEP 768:qX5L/v28rbBBAs4efgciryxApKd+CfbjYfou+lt/fFTujSjAsOmqeiir7L8nZ:A/db4Y4yxmCNu+r/tTujUAsOer7L8Z
- TLSH T151A37C317AC182B2E33BCB7564F58296A73678352E16C60F61CD4B490D63B90CE36F0A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE