Analysis
- max time kernel
149s - max time network
147s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
23/05/2026, 22:54
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-23_c292cdd1515c986d2b58bcaac0dd01a0_amadey_elex_maze_rhadamanthys_smoke-loader_stop_vidar.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-23_c292cdd1515c986d2b58bcaac0dd01a0_amadey_elex_maze_rhadamanthys_smoke-loader_stop_vidar.exe
Resource
win11-20260513-en
1 signatures
150 seconds
General
- Target 2026-05-23_c292cdd1515c986d2b58bcaac0dd01a0_amadey_elex_maze_rhadamanthys_smoke-loader_stop_vidar.exe
- Size 1.7MB
- Sample260523-2vxpvsbx9p
- SHA256 d046587be716ac336c403179deb57fdaee64a688fbc1f0d1d9ea3a9418ad7cf5
- MD5 c292cdd1515c986d2b58bcaac0dd01a0
- SHA1 604e8769aff0e05f1d060ba57d5926e6c33ece2a
- SHA512 bd7533f164f90f6680c82025dab12503e785170d307616e561c0151eab724c0ba003c90d7af74376e50f76e2d513c3130b2a8a1e3dda7919bb4b19b617ae4aaf
- SSDEEP 12288:tP/LvsFPyHZ/iYgNpaLVTGXZNYVLeyUji0h90ZD0wxpGZIVuKrHs8rYn5vX:5zEePgN0RTK0Le5ji0hmxNrM8rYn5v
- TLSH T1C085C4166654A722C06E90B8B4D0C2A7ACE17DD10B2249DB3345FFBD9E3BED197E5320
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-05-23_c292cdd1515c986d2b58bcaac0dd01a0_amadey_elex_maze_rhadamanthys_smoke-loader_stop_vidar.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-05-23_c292cdd1515c986d2b58bcaac0dd01a0_amadey_elex_maze_rhadamanthys_smoke-loader_stop_vidar.exe"C:\Users\Admin\AppData\Local\Temp\2026-05-23_c292cdd1515c986d2b58bcaac0dd01a0_amadey_elex_maze_rhadamanthys_smoke-loader_stop_vidar.exe"1⤵
- System Location Discovery: System Language Discovery
PID:3164