2026-11-03_7bb192c095b2f8d46169f7770c71c2b1_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop

General

Target
2026-11-03_7bb192c095b2f8d46169f7770c71c2b1_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
Size 96KB
Sample261104-tmkrbsdy7k
SHA256 fef09abab139b07a765b24eb6df25e92703ade36981e438772902d9df5afa674
MD5 7bb192c095b2f8d46169f7770c71c2b1
SHA1 56d077c5f8b66597afd59909c85a41cc3c0d336f
SHA512 520421a99a4df375aa034cb2d0edf6cd953dd2b084a1bf597b28a5ce7824cbb0a7cea150282cd0781f4dd83218ed27d3a1938f8e8be419c31975a64a4aafd36d
SSDEEP 768:bX5L/v28rbBBAs4efgciryxApKd+CfbjYfou+lt/fFTujSjAsOmqeiir6VQAs:t/db4Y4yxmCNu+r/tTujUAsOer6Vfs
TLSH
T114A36C2579C182B2D237C77554F5C297A73378762E26C60F62CD0B494E63B909E3AB0E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

upx

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
sample	UPX

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-11-03_7bb192c095b2f8d46169f7770c71c2b1_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop

2026-11-03_7bb192c095b2f8d46169f7770c71c2b1_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop

.exe 96KB

SHA256 fef09abab139b07a765b24eb6df25e92703ade36981e438772902d9df5afa674
MD5 7bb192c095b2f8d46169f7770c71c2b1
SHA1 56d077c5f8b66597afd59909c85a41cc3c0d336f
SHA512 520421a99a4df375aa034cb2d0edf6cd953dd2b084a1bf597b28a5ce7824cbb0a7cea150282cd0781f4dd83218ed27d3a1938f8e8be419c31975a64a4aafd36d
SSDEEP 768:bX5L/v28rbBBAs4efgciryxApKd+CfbjYfou+lt/fFTujSjAsOmqeiir6VQAs:t/db4Y4yxmCNu+r/tTujUAsOer6Vfs
TLSH
T114A36C2579C182B2D237C77554F5C297A73378762E26C60F62CD0B494E63B909E3AB0E
MD5 SHA1 SHA512 SSDEEP TLSH

UPX dump on OEP (original entry point)
UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

8910

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths