General
- Target 2026-11-07_124be35f46c310f1c5090aa1d54465ca_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 97KB
- Sample261107-vc48nadt31
- SHA256 24b181ac4d34556ce0726f6c3bf3936a36b21fcdb143f2217188cc257dd828ad
- MD5 124be35f46c310f1c5090aa1d54465ca
- SHA1 d49bba8e3873a5ba4ef693baf0aea67ad9ecb1f8
- SHA512 f08752b381a35a0e91f890a27151b50753e7e4b266555a69236c8a036544452c4e57a7a175d33832c6ba1a8282a1db7a7dbe5e8eb7d4dd9cf49e7e9bd6695e85
- SSDEEP 1536:4Cd+qitb0bt+FTCQ2j9EvHsdX+u1X20n2eN6wrr0MR+2:H4b0hR9EE1+u1X2q2e3r22
- TLSH T12EA3F6347AD58532E33BCAB546F782CA7A36B6222D06D61E51CA43450C33FA1DD79B0E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-11-07_124be35f46c310f1c5090aa1d54465ca_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260911-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-07_124be35f46c310f1c5090aa1d54465ca_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 97KB
- SHA256 24b181ac4d34556ce0726f6c3bf3936a36b21fcdb143f2217188cc257dd828ad
- MD5 124be35f46c310f1c5090aa1d54465ca
- SHA1 d49bba8e3873a5ba4ef693baf0aea67ad9ecb1f8
- SHA512 f08752b381a35a0e91f890a27151b50753e7e4b266555a69236c8a036544452c4e57a7a175d33832c6ba1a8282a1db7a7dbe5e8eb7d4dd9cf49e7e9bd6695e85
- SSDEEP 1536:4Cd+qitb0bt+FTCQ2j9EvHsdX+u1X20n2eN6wrr0MR+2:H4b0hR9EE1+u1X2q2e3r22
- TLSH T12EA3F6347AD58532E33BCAB546F782CA7A36B6222D06D61E51CA43450C33FA1DD79B0E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Custom signature
UPX dump on OEP (original entry point)
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE