General
- Target 2026-11-01_af8e6fb0e94c3356f7d8e5ff5585590b_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 97KB
- Sample261102-ntf4tshs8x
- SHA256 9af2b2a4b49721a973bf1cef905b4d303afbbda81675296d01536a3f3e8b9713
- MD5 af8e6fb0e94c3356f7d8e5ff5585590b
- SHA1 1bc616ea73c2c9b880facf092151577b51be616c
- SHA512 ba50b18edd2e84cd5d97c230a7167edb1e357622eb144ddd183d2adb6f0136e674e65075a0a4b87c02a16a5392d7215aba8cfa3828e0adb141840aec59c1cb55
- SSDEEP 768:qX5L/v28rbBBAs4efgciryxApKd+CfbjYfou+lt/fFTujSjAsOmqeiir7L8na:A/db4Y4yxmCNu+r/tTujUAsOer7L8a
- TLSH T10EA37C357AC182B2E33BCB7564F58296A73678352E16C60F61CD4B494D63B90CE36F0A
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-11-01_af8e6fb0e94c3356f7d8e5ff5585590b_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260911-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-01_af8e6fb0e94c3356f7d8e5ff5585590b_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 97KB
- SHA256 9af2b2a4b49721a973bf1cef905b4d303afbbda81675296d01536a3f3e8b9713
- MD5 af8e6fb0e94c3356f7d8e5ff5585590b
- SHA1 1bc616ea73c2c9b880facf092151577b51be616c
- SHA512 ba50b18edd2e84cd5d97c230a7167edb1e357622eb144ddd183d2adb6f0136e674e65075a0a4b87c02a16a5392d7215aba8cfa3828e0adb141840aec59c1cb55
- SSDEEP 768:qX5L/v28rbBBAs4efgciryxApKd+CfbjYfou+lt/fFTujSjAsOmqeiir7L8na:A/db4Y4yxmCNu+r/tTujUAsOer7L8a
- TLSH T10EA37C357AC182B2E33BCB7564F58296A73678352E16C60F61CD4B494D63B90CE36F0A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE