Analysis
-
max time kernel
137s -
max time network
144s -
platform
windows10-2004_x64 -
resource
win10v2004-20250410-en -
resource tags
arch:x64arch:x86image:win10v2004-20250410-enlocale:en-usos:windows10-2004-x64system -
submitted
21/04/2025, 23:53
Behavioral task
behavioral1
Sample
2025-04-21_ec8021ec874548c69f0910bab9453d12_amadey_black-basta_elex_luca-stealer_mafia_metamorfo_rhadamanthys.exe
Resource
win10v2004-20250410-en
Behavioral task
behavioral2
Sample
2025-04-21_ec8021ec874548c69f0910bab9453d12_amadey_black-basta_elex_luca-stealer_mafia_metamorfo_rhadamanthys.exe
Resource
win11-20250410-en
General
-
Target
2025-04-21_ec8021ec874548c69f0910bab9453d12_amadey_black-basta_elex_luca-stealer_mafia_metamorfo_rhadamanthys.exe
-
Size
2.6MB
-
MD5
ec8021ec874548c69f0910bab9453d12
-
SHA1
921860426b2bc41d001167794a3ecd21c8939a21
-
SHA256
8875b706025c5c6c5ca7c1245f4151849ec074b9b8aef0f3d00c3100c0226063
-
SHA512
350a6e131ad1232eed8caa96a7906d50335847123b6819d349071402f054158ef1713e229d83912ec39dd3698afe71ec53d5a20edbd7e3d2dad250a2bc6a5b1e
-
SSDEEP
49152:YL7LNq5HEHThTmb6fLJzObl589HQ+VE9RPt5b6vXX0s9dg2:YL7/HTs8LJzOuHQBRPj6v0sjg2
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2025-04-21_ec8021ec874548c69f0910bab9453d12_amadey_black-basta_elex_luca-stealer_mafia_metamorfo_rhadamanthys.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2025-04-21_ec8021ec874548c69f0910bab9453d12_amadey_black-basta_elex_luca-stealer_mafia_metamorfo_rhadamanthys.exe"C:\Users\Admin\AppData\Local\Temp\2025-04-21_ec8021ec874548c69f0910bab9453d12_amadey_black-basta_elex_luca-stealer_mafia_metamorfo_rhadamanthys.exe"1⤵
- System Location Discovery: System Language Discovery
PID:5180