General
- Target 2026-11-03_41735123c99642fde581f50e88cd15ad_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 98KB
- Sample261104-2ke23aeh38
- SHA256 fa5a93bca2338113dd187aa02f1d8f21f97d7c140da3758992836eda2a4b27fc
- MD5 41735123c99642fde581f50e88cd15ad
- SHA1 486388f5f512df24a2de23ea288e9d8905498021
- SHA512 d15bdcf96e8bec7faa1660ddd0ebe6e1a7e6d84e8dc3ebc99c212c6222d442f24768f57a2d2e388f9371dd64a8e24c9e3d0ae58d486b04794e83254bc5bc5ec6
- SSDEEP 1536:NzUIb25A8ULw005o09WDuYHGjUAsOwRwrXDQ:dUIbS5xquYmSOwR/
- TLSH T192A37C257AD18173D337C67558F682C7BA37B8267E16CA0F61CA070A4CA3B915D36B0E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-11-03_41735123c99642fde581f50e88cd15ad_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260911-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-03_41735123c99642fde581f50e88cd15ad_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 98KB
- SHA256 fa5a93bca2338113dd187aa02f1d8f21f97d7c140da3758992836eda2a4b27fc
- MD5 41735123c99642fde581f50e88cd15ad
- SHA1 486388f5f512df24a2de23ea288e9d8905498021
- SHA512 d15bdcf96e8bec7faa1660ddd0ebe6e1a7e6d84e8dc3ebc99c212c6222d442f24768f57a2d2e388f9371dd64a8e24c9e3d0ae58d486b04794e83254bc5bc5ec6
- SSDEEP 1536:NzUIb25A8ULw005o09WDuYHGjUAsOwRwrXDQ:dUIbS5xquYmSOwR/
- TLSH T192A37C257AD18173D337C67558F682C7BA37B8267E16CA0F61CA070A4CA3B915D36B0E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Custom signature
UPX dump on OEP (original entry point)
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE