Analysis
-
max time kernel
147s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20250314-en -
resource tags
arch:x64arch:x86image:win10v2004-20250314-enlocale:en-usos:windows10-2004-x64system -
submitted
01/04/2025, 05:44
Behavioral task
behavioral1
Sample
2025-04-01_e64b5c42a0d76589a1898aaf468b3b38_amadey_karagany_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20250314-en
1 signatures
150 seconds
General
-
Target
2025-04-01_e64b5c42a0d76589a1898aaf468b3b38_amadey_karagany_rhadamanthys_smoke-loader.exe
-
Size
108KB
-
MD5
e64b5c42a0d76589a1898aaf468b3b38
-
SHA1
fd8f2f236c86ada12eb0185b102ff935fe755547
-
SHA256
3d292e3620f0f47b263394f55196f3366ac6fbf2668c6e86bc17e05c6e2d930a
-
SHA512
edbd6bebd5d84d03f980c9d905006ad499b658a729a9f017547d79250e8061d22189e7cb3e6f8658f177beb216a71732d0c760eadb962f765c41369acce86efd
-
SSDEEP
3072:SbWjdIPbcia0NFtwwnILn3py6D268XEPK52:SbWjMbcCtwwnchx1y
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2025-04-01_e64b5c42a0d76589a1898aaf468b3b38_amadey_karagany_rhadamanthys_smoke-loader.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2025-04-01_e64b5c42a0d76589a1898aaf468b3b38_amadey_karagany_rhadamanthys_smoke-loader.exe"C:\Users\Admin\AppData\Local\Temp\2025-04-01_e64b5c42a0d76589a1898aaf468b3b38_amadey_karagany_rhadamanthys_smoke-loader.exe"1⤵
- System Location Discovery: System Language Discovery
PID:3624