General
- Target 2026-11-01_af25f5a803507019eda2cec749226322_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 98KB
- Sample261102-nv16dsbv8j
- SHA256 fa63ea901151fa8c20e4bd17b5405cdfd51e84163d0044e81c21e8efe0c2c3fa
- MD5 af25f5a803507019eda2cec749226322
- SHA1 d95761bc1b3a118957070416e7271dcc7decf148
- SHA512 99617f763ccb33764ca8b93083bc3d50cff8c76de5f1a538c580cd728ec65e5cd2ba2e377c70e1b307295a546a5843112ad4018fc491ee142252a1665b793ae1
- SSDEEP 768:qX5L/v28rbBBAs4efgciryxApKd+CfbjYfou+lt/fFTujSjAsOmqeiir7L8nB:A/db4Y4yxmCNu+r/tTujUAsOer7L8B
- TLSH T147A37C3176D182B2E33BCB7555F58296A736B8352E16C60F61CD4B490D63B90CE36F0A
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-11-01_af25f5a803507019eda2cec749226322_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260911-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-01_af25f5a803507019eda2cec749226322_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 98KB
- SHA256 fa63ea901151fa8c20e4bd17b5405cdfd51e84163d0044e81c21e8efe0c2c3fa
- MD5 af25f5a803507019eda2cec749226322
- SHA1 d95761bc1b3a118957070416e7271dcc7decf148
- SHA512 99617f763ccb33764ca8b93083bc3d50cff8c76de5f1a538c580cd728ec65e5cd2ba2e377c70e1b307295a546a5843112ad4018fc491ee142252a1665b793ae1
- SSDEEP 768:qX5L/v28rbBBAs4efgciryxApKd+CfbjYfou+lt/fFTujSjAsOmqeiir7L8nB:A/db4Y4yxmCNu+r/tTujUAsOer7L8B
- TLSH T147A37C3176D182B2E33BCB7555F58296A736B8352E16C60F61CD4B490D63B90CE36F0A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE