General
-
Target
2025-03-30_721a90101f7ce597a9fa16501def6950_amadey_black-basta_luca-stealer_rhadamanthys_smoke-loader
-
Size
8.0MB
-
Sample
250330-tpwllsvkw6
-
MD5
721a90101f7ce597a9fa16501def6950
-
SHA1
f14e6a307a929e8e6a17d9e4ec0a3d388dae01b8
-
SHA256
5bb314b25061f56152e69b96ce60ff0cdde1e9fa92accfa56aa64e15fee506d8
-
SHA512
70960ab66b7084dce11632f4f0230d98798f372d046fbcc39c78690d85f101cc0ceff91f5dd997aa314ed38cca36d74606305719c4e32b4699c99f03825aa3dc
-
SSDEEP
98304:nCHNToqTB3xuPzVXAhN0EczQqzaAzganpL8UHdCHNcFLOAkGkzdnEVomFHKnP0:nC9sPJ3zQqLCOFLOyomFHKnP0
Static task
static1
Behavioral task
behavioral1
Sample
2025-03-30_721a90101f7ce597a9fa16501def6950_amadey_black-basta_luca-stealer_rhadamanthys_smoke-loader.exe
Resource
win7-20240903-en
Malware Config
Targets
-
-
Target
2025-03-30_721a90101f7ce597a9fa16501def6950_amadey_black-basta_luca-stealer_rhadamanthys_smoke-loader
-
Size
8.0MB
-
MD5
721a90101f7ce597a9fa16501def6950
-
SHA1
f14e6a307a929e8e6a17d9e4ec0a3d388dae01b8
-
SHA256
5bb314b25061f56152e69b96ce60ff0cdde1e9fa92accfa56aa64e15fee506d8
-
SHA512
70960ab66b7084dce11632f4f0230d98798f372d046fbcc39c78690d85f101cc0ceff91f5dd997aa314ed38cca36d74606305719c4e32b4699c99f03825aa3dc
-
SSDEEP
98304:nCHNToqTB3xuPzVXAhN0EczQqzaAzganpL8UHdCHNcFLOAkGkzdnEVomFHKnP0:nC9sPJ3zQqLCOFLOyomFHKnP0
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-
Enumerates processes with tasklist
-
MITRE ATT&CK Enterprise v15
Discovery
Network Service Discovery
1Network Share Discovery
1Process Discovery
1Query Registry
2Remote System Discovery
1System Information Discovery
4System Location Discovery
1System Language Discovery
1System Network Configuration Discovery
1Internet Connection Discovery
1System Network Connections Discovery
1