Analysis
- max time kernel
148s - max time network
149s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260618-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260618-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
29/06/2026, 18:44
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-25_ff3cdcdbb5feba0ac8b6772da0e68357_amadey_elex_ramnit_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-25_ff3cdcdbb5feba0ac8b6772da0e68357_amadey_elex_ramnit_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win11ltsc2024-20260618-en
1 signatures
150 seconds
General
- Target 2026-06-25_ff3cdcdbb5feba0ac8b6772da0e68357_amadey_elex_ramnit_redline-stealer_rhadamanthys_smoke-loader_stop.exe
- Size 126KB
- Sample260629-xdjpfscx3s
- SHA256 ac9e5c862354379c1ce57248d289c40295be7d457d9f4ca5d8f3fc5ad731f399
- MD5 ff3cdcdbb5feba0ac8b6772da0e68357
- SHA1 ca5b7f27709afdcdee9159c9fde09a059b279e6b
- SHA512 429ad216a5e89a759f5bd769bd7169e79dd024ff53dac01f8989ec062a117827bd359bd06edf7914fbe566c025c3f46be4b4d48afdc1cf035dd258c67242e618
- SSDEEP 3072:eLLVpImRqLOUph/6nwX5c6LsXS5QRNd6:2LVpOjS65HISoN
- TLSH T134C3C019BA85C872E41215F81456D7610B1EED222BD55ACB3BB6B69F4F722C2C33730E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-06-25_ff3cdcdbb5feba0ac8b6772da0e68357_amadey_elex_ramnit_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-06-25_ff3cdcdbb5feba0ac8b6772da0e68357_amadey_elex_ramnit_redline-stealer_rhadamanthys_smoke-loader_stop.exe"C:\Users\Admin\AppData\Local\Temp\2026-06-25_ff3cdcdbb5feba0ac8b6772da0e68357_amadey_elex_ramnit_redline-stealer_rhadamanthys_smoke-loader_stop.exe"1⤵
- System Location Discovery: System Language Discovery
PID:6084