Analysis
- max time kernel
149s - max time network
155s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
22/05/2026, 14:29
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-22_499aa448c91a56e6602e39d6fe1e1a21_amadey_elex_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-22_499aa448c91a56e6602e39d6fe1e1a21_amadey_elex_rhadamanthys_smoke-loader_stop.exe
Resource
win11-20260513-en
1 signatures
150 seconds
General
- Target 2026-05-22_499aa448c91a56e6602e39d6fe1e1a21_amadey_elex_rhadamanthys_smoke-loader_stop.exe
- Size 2.5MB
- Sample260522-rt2mbadz4l
- SHA256 b4958b08f164e2900565c35b25323588adac9b72176cbc6f4086d2a77ab1cd89
- MD5 499aa448c91a56e6602e39d6fe1e1a21
- SHA1 b7c8f6bd6b75ead55730d0933088a6e1b04a8dc9
- SHA512 3a79a0f6d2d8c8261e862d6124d01a2effb624c4fb66a59baf30b4d7f701ade300309a69f73447c16c13454d77c2c612c7b2bbefd8a88b1d3927a44e484acf74
- SSDEEP 49152:TO7HhppcY/jc9IW1dXgfC/MHmglPji0Aj:yHhp+0c9IW1dXgfC/MHmg1jo
- TLSH T19DC5B4C1B1E38937C4A192708591E98875223FC096377D4BF2867E9EFBBE681991D331
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-05-22_499aa448c91a56e6602e39d6fe1e1a21_amadey_elex_rhadamanthys_smoke-loader_stop.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-05-22_499aa448c91a56e6602e39d6fe1e1a21_amadey_elex_rhadamanthys_smoke-loader_stop.exe"C:\Users\Admin\AppData\Local\Temp\2026-05-22_499aa448c91a56e6602e39d6fe1e1a21_amadey_elex_rhadamanthys_smoke-loader_stop.exe"1⤵
- System Location Discovery: System Language Discovery
PID:5772