General
- Target 2026-10-28_7ba4154e79b98b77e51ae9e1c65e92b6_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 95KB
- Sample261030-brv4ragt91
- SHA256 9c9d9233c00bd1098a6cb19e84147a4b9ab7962132d32ef7a842e44e6f0bd201
- MD5 7ba4154e79b98b77e51ae9e1c65e92b6
- SHA1 cb3f889cfa17e1592ee74d976784d1cdee72b052
- SHA512 045070f6ae002eda54ce16091398fe7fc5eea9d68d12ec21cc7c1e104c00fbe69b0825301d9734f948e55e48485e5df6361787628b08178bbc14def4ff8a61da
- SSDEEP 1536:NzUIb25A8ULw005o09WDuYHGjUAsOwRD1ifj:dUIbS5xquYmSOwRxs
- TLSH T109A36D2579C286B3D233C67154F6C3C3AA27F936AA26CA1F61CE070A5D937911D26F0D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-10-28_7ba4154e79b98b77e51ae9e1c65e92b6_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260911-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-28_7ba4154e79b98b77e51ae9e1c65e92b6_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 95KB
- SHA256 9c9d9233c00bd1098a6cb19e84147a4b9ab7962132d32ef7a842e44e6f0bd201
- MD5 7ba4154e79b98b77e51ae9e1c65e92b6
- SHA1 cb3f889cfa17e1592ee74d976784d1cdee72b052
- SHA512 045070f6ae002eda54ce16091398fe7fc5eea9d68d12ec21cc7c1e104c00fbe69b0825301d9734f948e55e48485e5df6361787628b08178bbc14def4ff8a61da
- SSDEEP 1536:NzUIb25A8ULw005o09WDuYHGjUAsOwRD1ifj:dUIbS5xquYmSOwRxs
- TLSH T109A36D2579C286B3D233C67154F6C3C3AA27F936AA26CA1F61CE070A5D937911D26F0D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE