General
- Target 2026-11-09_366e188b3db903de0d55af8b3adbdc6f_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 98KB
- Sample261110-2pxsnsca82
- SHA256 b99e19f0f2fdb7c1db9e33397a7fb226d945451f624320f94eefb4757e03422e
- MD5 366e188b3db903de0d55af8b3adbdc6f
- SHA1 4283331785a014453a92d18b23f5d4a1b55004cf
- SHA512 03cf8a64f019c014bc22e3af1e1dab8f40d345c0dc7b2e32b1a472c9f6dd077f4b89ec615136bada1a94c8f82a7b1ef4f1d25f6efd5ca5b3f7cdbc68d6c07d65
- SSDEEP 1536:NzUIb25A8ULw005o09WDuYHGjUAsOwRwrXD8:dUIbS5xquYmSOwRL
- TLSH T1C9A37C257AD18173D337C77558F582C7AA37B8267E16CA0F61CA070A4CA3B925D36B0E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-11-09_366e188b3db903de0d55af8b3adbdc6f_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260911-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-09_366e188b3db903de0d55af8b3adbdc6f_amadey_coinminer_elex_rhadamanthys_smoke-loader_stop
- Size 98KB
- SHA256 b99e19f0f2fdb7c1db9e33397a7fb226d945451f624320f94eefb4757e03422e
- MD5 366e188b3db903de0d55af8b3adbdc6f
- SHA1 4283331785a014453a92d18b23f5d4a1b55004cf
- SHA512 03cf8a64f019c014bc22e3af1e1dab8f40d345c0dc7b2e32b1a472c9f6dd077f4b89ec615136bada1a94c8f82a7b1ef4f1d25f6efd5ca5b3f7cdbc68d6c07d65
- SSDEEP 1536:NzUIb25A8ULw005o09WDuYHGjUAsOwRwrXD8:dUIbS5xquYmSOwRL
- TLSH T1C9A37C257AD18173D337C77558F582C7AA37B8267E16CA0F61CA070A4CA3B925D36B0E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Custom signature
UPX dump on OEP (original entry point)
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE