07bb3135983280fb7b7afc7ddf4ee16644a3e23a5f2d343a15ad2d162bdce25d

Analysis

max time kernel
149s
max time network
149s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
16/04/2026, 15:53

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-04-16_37e9c15bd5bb400af7005b9e2985062c_elex_rhadamanthys_smoke-loader_stop.exe
Size 2.0MB
Sample260416-tbmfsaev4m
SHA256 07bb3135983280fb7b7afc7ddf4ee16644a3e23a5f2d343a15ad2d162bdce25d
MD5 37e9c15bd5bb400af7005b9e2985062c
SHA1 d618e627d483c22a4d5dcf05fed9700189c277cd
SHA512 c824ebe91607885e26ffe29f42adbbe814406e9908d3893b80342b4fe6f12353142f05305b32b9513c8c4d73d9f845119b832a36203a58e98fea4f3f47617525
SSDEEP 24576:9FHDUT44/izRXTOkMtrIceMaFPjkjD29f2WXVav9Mk+H8blAXIR8R:9Vs4akOElMaFLkxXv9MLRIR8
TLSH
T10CA507217AEFEB13CC7401708F3D96A416606DA01BE5D66336A07B6DE83316DAE1F217
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2026-04-16_37e9c15bd5bb400af7005b9e2985062c_elex_rhadamanthys_smoke-loader_stop.exe

C:\Users\Admin\AppData\Local\Temp\2026-04-16_37e9c15bd5bb400af7005b9e2985062c_elex_rhadamanthys_smoke-loader_stop.exe
"C:\Users\Admin\AppData\Local\Temp\2026-04-16_37e9c15bd5bb400af7005b9e2985062c_elex_rhadamanthys_smoke-loader_stop.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:5020

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads