Analysis
-
max time kernel
103s -
max time network
129s -
platform
windows10-2004_x64 -
resource
win10v2004-20250314-en -
resource tags
arch:x64arch:x86image:win10v2004-20250314-enlocale:en-usos:windows10-2004-x64system -
submitted
01/04/2025, 11:41
Behavioral task
behavioral1
Sample
2025-04-01_e7c207b8b624a125102d577ceda11e6a_amadey_black-basta_hawkeye_luca-stealer_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20250314-en
General
-
Target
2025-04-01_e7c207b8b624a125102d577ceda11e6a_amadey_black-basta_hawkeye_luca-stealer_rhadamanthys_smoke-loader.exe
-
Size
8.3MB
-
MD5
e7c207b8b624a125102d577ceda11e6a
-
SHA1
fae4bba90f846b0890496c79fc03df3be1e7193a
-
SHA256
6903c6b7651d0b6213109bc685eacd15376eb9cd566ac04507d89bdc09713fb1
-
SHA512
6c086849e4cf457376427a6931b92853286376b3a9eaf4786784c183001cccd29f736dbf112e375094c5ce2f4bb6f159e8ae677d3d835f0b23851ff0e5534b6a
-
SSDEEP
49152:iwnNTBXLfUlljdpCxpCy2RAR5FeA6wgwnNTBXLfUlljH/UH3pCxpCy2RAR5FeA6L:RkCPCGJSICPCGJkCPCGJS17L
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2025-04-01_e7c207b8b624a125102d577ceda11e6a_amadey_black-basta_hawkeye_luca-stealer_rhadamanthys_smoke-loader.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2025-04-01_e7c207b8b624a125102d577ceda11e6a_amadey_black-basta_hawkeye_luca-stealer_rhadamanthys_smoke-loader.exe"C:\Users\Admin\AppData\Local\Temp\2025-04-01_e7c207b8b624a125102d577ceda11e6a_amadey_black-basta_hawkeye_luca-stealer_rhadamanthys_smoke-loader.exe"1⤵
- System Location Discovery: System Language Discovery
PID:3456