Analysis
- max time kernel
148s - max time network
149s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260629-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260629-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
02/07/2026, 23:04
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-02_01726b1825fdc244fd2a199a78b15e2a_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-02_01726b1825fdc244fd2a199a78b15e2a_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win11ltsc2024-20260629-en
1 signatures
150 seconds
General
- Target 2026-07-02_01726b1825fdc244fd2a199a78b15e2a_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
- Size 59KB
- Sample260702-22gl8acz7p
- SHA256 73f4d72db3567c4f011cda6ba0452afbf45884e0d913c579f2ee628a45e21845
- MD5 01726b1825fdc244fd2a199a78b15e2a
- SHA1 46cc003c255b1d3a9e51a075acf166e758718f7c
- SHA512 092a7316b8089007e26149807f6ab4f377779d2b309eeb976883f846089b9ffe80d09b141e2962885e2c99f1606981862e05c0ef0949fe76f93f8a469ac4a98c
- SSDEEP 768:v1tj7LdCsxL1ZbzV9z0Tbc6FsOzdA6R4UWPYfIc/Qi3qEBQprdm:vLL1/hV9z0zFxRoLOUprdm
- TLSH T1DD437D12B980C0B2C01145B81466EB516F6FBC323797918B3B99B66F9F312D2D63A35F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-07-02_01726b1825fdc244fd2a199a78b15e2a_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-07-02_01726b1825fdc244fd2a199a78b15e2a_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe"C:\Users\Admin\AppData\Local\Temp\2026-07-02_01726b1825fdc244fd2a199a78b15e2a_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe"1⤵
- System Location Discovery: System Language Discovery
PID:4648