d0c7c5cee91d9e0a504a21c884419733ecee51628058baf0c3412636ffee6a1d

Analysis

max time kernel
149s
max time network
149s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
03/06/2026, 15:07

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-06-03_a8ef5e75598274e80ce1f74df71831b2_amadey_elex_ramnit_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Size 126KB
Sample260603-shcdqaas7v
SHA256 d0c7c5cee91d9e0a504a21c884419733ecee51628058baf0c3412636ffee6a1d
MD5 a8ef5e75598274e80ce1f74df71831b2
SHA1 6753e2f9eb9cc4d6758e6cca58185553652a4a06
SHA512 a556599b98af1895fe7daaa2f8c18e58a47f070d959e4accefb996acdc695f1b25093b3c74615663fe6a27626fb09057cb8ff4979fe1d854d49b5526e7524183
SSDEEP 1536:ELLlfvrV9z0RuxR53i6EBXlLOUph/qaynwX5/R2E7iFgdBfV+TDLBFb+RNTJPkn0:ELLVpImRqLOUph/6nwX5c6LsX6RNd6
TLSH
T15CC3C015BA85C872E01214F81452D7611B1AED222BD556CB3FB9BAAF5F712C2C33731E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2026-06-03_a8ef5e75598274e80ce1f74df71831b2_amadey_elex_ramnit_redline-stealer_rhadamanthys_smoke-loader_stop.exe

C:\Users\Admin\AppData\Local\Temp\2026-06-03_a8ef5e75598274e80ce1f74df71831b2_amadey_elex_ramnit_redline-stealer_rhadamanthys_smoke-loader_stop.exe
"C:\Users\Admin\AppData\Local\Temp\2026-06-03_a8ef5e75598274e80ce1f74df71831b2_amadey_elex_ramnit_redline-stealer_rhadamanthys_smoke-loader_stop.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:1500

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads