General
- Target 2026-11-03_7bb192c095b2f8d46169f7770c71c2b1_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 96KB
- Sample261104-tmkrbsdy7k
- SHA256 fef09abab139b07a765b24eb6df25e92703ade36981e438772902d9df5afa674
- MD5 7bb192c095b2f8d46169f7770c71c2b1
- SHA1 56d077c5f8b66597afd59909c85a41cc3c0d336f
- SHA512 520421a99a4df375aa034cb2d0edf6cd953dd2b084a1bf597b28a5ce7824cbb0a7cea150282cd0781f4dd83218ed27d3a1938f8e8be419c31975a64a4aafd36d
- SSDEEP 768:bX5L/v28rbBBAs4efgciryxApKd+CfbjYfou+lt/fFTujSjAsOmqeiir6VQAs:t/db4Y4yxmCNu+r/tTujUAsOer6Vfs
- TLSH T114A36C2579C182B2D237C77554F5C297A73378762E26C60F62CD0B494E63B909E3AB0E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-11-03_7bb192c095b2f8d46169f7770c71c2b1_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260911-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-03_7bb192c095b2f8d46169f7770c71c2b1_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 96KB
- SHA256 fef09abab139b07a765b24eb6df25e92703ade36981e438772902d9df5afa674
- MD5 7bb192c095b2f8d46169f7770c71c2b1
- SHA1 56d077c5f8b66597afd59909c85a41cc3c0d336f
- SHA512 520421a99a4df375aa034cb2d0edf6cd953dd2b084a1bf597b28a5ce7824cbb0a7cea150282cd0781f4dd83218ed27d3a1938f8e8be419c31975a64a4aafd36d
- SSDEEP 768:bX5L/v28rbBBAs4efgciryxApKd+CfbjYfou+lt/fFTujSjAsOmqeiir6VQAs:t/db4Y4yxmCNu+r/tTujUAsOer6Vfs
- TLSH T114A36C2579C182B2D237C77554F5C297A73378762E26C60F62CD0B494E63B909E3AB0E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE