General
- Target 2026-11-01_a42eb4c01e84437805be8ff9b037d28f_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 96KB
- Sample261102-p4rtrawv3j
- SHA256 c9043576ae80394fb2de631dd6fca1a02e69329d1f960704afa878e6224d4447
- MD5 a42eb4c01e84437805be8ff9b037d28f
- SHA1 4518da1aceabea0b5b22641e662bca335c7d47b7
- SHA512 7bd19c056686cce650fa5cb40cc7ee6b65e308ebeec2a08cfbad9efa58073419454bdce8734af4a66a837670188d8331c046c7d854693fd39f7e1876149a574d
- SSDEEP 768:bX5L/v28rbBBAs4efgciryxApKd+CfbjYfou+lt/fFTujSjAsOmqeiir6VQAPO:t/db4Y4yxmCNu+r/tTujUAsOer6VfPO
- TLSH T1AFA36B2579C182B2D237C77554F5C297A63378367E26C60F62CD0B494E63B909E3AB0E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-11-01_a42eb4c01e84437805be8ff9b037d28f_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260911-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-01_a42eb4c01e84437805be8ff9b037d28f_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 96KB
- SHA256 c9043576ae80394fb2de631dd6fca1a02e69329d1f960704afa878e6224d4447
- MD5 a42eb4c01e84437805be8ff9b037d28f
- SHA1 4518da1aceabea0b5b22641e662bca335c7d47b7
- SHA512 7bd19c056686cce650fa5cb40cc7ee6b65e308ebeec2a08cfbad9efa58073419454bdce8734af4a66a837670188d8331c046c7d854693fd39f7e1876149a574d
- SSDEEP 768:bX5L/v28rbBBAs4efgciryxApKd+CfbjYfou+lt/fFTujSjAsOmqeiir6VQAPO:t/db4Y4yxmCNu+r/tTujUAsOer6VfPO
- TLSH T1AFA36B2579C182B2D237C77554F5C297A63378367E26C60F62CD0B494E63B909E3AB0E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE