Analysis
-
max time kernel
144s -
max time network
138s -
platform
windows10-2004_x64 -
resource
win10v2004-20250314-en -
resource tags
arch:x64arch:x86image:win10v2004-20250314-enlocale:en-usos:windows10-2004-x64system -
submitted
31/03/2025, 07:01
Behavioral task
behavioral1
Sample
2025-03-31_361cd24e6bf1eb5b9487856813c28ad7_amadey_karagany_rhadamanthys_smoke-loader.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
2025-03-31_361cd24e6bf1eb5b9487856813c28ad7_amadey_karagany_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20250314-en
General
-
Target
2025-03-31_361cd24e6bf1eb5b9487856813c28ad7_amadey_karagany_rhadamanthys_smoke-loader.exe
-
Size
108KB
-
MD5
361cd24e6bf1eb5b9487856813c28ad7
-
SHA1
0abdacf0b8bc383c5cc435c59facca2c6b655ed2
-
SHA256
91275ed96de927b79a85779d8f3e407165efc159166c6618152d9a5d8c3fb646
-
SHA512
4aa1059e8ea6fd6d5623efa9452f1660c30b842f7e7b273f46d5f1df90e1f7edb68e015bd6f78c945ce6ebb7410bab4efcc75f821855de8e89879fbc58fced5d
-
SSDEEP
1536:nwUHibBDAEGNDL+VepMa+WIy1fAqR9SfPmtvki3bTKkVlnPbah68XEPVGc5:w0i9D8pM9W91fAXev5jhah68XEPVGc5
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2025-03-31_361cd24e6bf1eb5b9487856813c28ad7_amadey_karagany_rhadamanthys_smoke-loader.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2025-03-31_361cd24e6bf1eb5b9487856813c28ad7_amadey_karagany_rhadamanthys_smoke-loader.exe"C:\Users\Admin\AppData\Local\Temp\2025-03-31_361cd24e6bf1eb5b9487856813c28ad7_amadey_karagany_rhadamanthys_smoke-loader.exe"1⤵
- System Location Discovery: System Language Discovery
PID:4760