Analysis
- max time kernel
0s - platform
windows10-2004_x64 - resource
win10v2004-20260130-en - resource tags
arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
11/05/2026, 01:00
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-11_5cde2670fa41beeebc318cf7310e7da4_amadey_karagany_mafia_manuscrypt_rhadamanthys_smoke-loader_stop_tofsee.exe
Resource
win10v2004-20260130-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-11_5cde2670fa41beeebc318cf7310e7da4_amadey_karagany_mafia_manuscrypt_rhadamanthys_smoke-loader_stop_tofsee.exe
Resource
win11-20260130-en
0 signatures
150 seconds
Errors
Reason
Payload did not run: image=C:\Users\Admin\AppData\Local\Temp\2026-05-11_5cde2670fa41beeebc318cf7310e7da4_amadey_karagany_mafia_manuscrypt_rhadamanthys_smoke-loader_stop_tofsee.exe
command="C:\Users\Admin\AppData\Local\Temp\2026-05-11_5cde2670fa41beeebc318cf7310e7da4_amadey_karagany_mafia_manuscrypt_rhadamanthys_smoke-loader_stop_tofsee.exe"
wdir=C:\Users\Admin\AppData\Local\Temp
Payload error: %1 is not a valid Win32 application.
General
- Target 2026-05-11_5cde2670fa41beeebc318cf7310e7da4_amadey_karagany_mafia_manuscrypt_rhadamanthys_smoke-loader_stop_tofsee.exe
- Size 250KB
- Sample260511-bcpy7ag12v
- SHA256 19c031a3ac01722b00d4fbe78a1157215af65f425796bf6776a99ececba86d20
- MD5 5cde2670fa41beeebc318cf7310e7da4
- SHA1 73f00b4e04755ff997b5917b218def75ef0fc9f8
- SHA512 b42eb9cbbe30908cf4bd91d08319d48518e1c941568c7c287f4a97de61b6b58ff994b199e5bd1d19d0b7dbaf9ac1f78517aec2ad4cd2af82cc40867adbb9e163
- SSDEEP 6144:f+YrOIBjaklexBgiJ8sTSIkIpxIp8mDtfPBRwasxXq:zOCjaklYgVIpxIhDtR
- TLSH T1F2449E3EB94854B3D2A3173AC9E0C5514D0CF4F17620D6CB1F9FAC66BAA62B04D6434E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10