d65a3facb2a0286819cbee29e25eaa8b7b9e9d16ed7bf7a891944442af8f937c

Analysis

max time kernel
148s
max time network
112s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
13/07/2026, 17:44

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-07-13_1bc3c1179c5cb13edd8b473c4a19e659_amadey_elex_loda_rhadamanthys_smoke-loader.exe
Size 2.0MB
Sample260713-wbas4ae15v
SHA256 d65a3facb2a0286819cbee29e25eaa8b7b9e9d16ed7bf7a891944442af8f937c
MD5 1bc3c1179c5cb13edd8b473c4a19e659
SHA1 482506baa39985d6b600e1f713e31518b0838f6e
SHA512 5c83e3c858f7d2e0ce46b5b87537d2e01a086967ed3dc24c95062fe874501a79a939b65a8c016d4b8c2cff7cdb300f1fd3cf589df4492de3516d7a9736409495
SSDEEP 49152:gtrGEQDdEqHiNCQceEx8jM6Mj5VBJHl0rJtylEDe:+aEAdEqHiNPixh64DJFmJtyl4
TLSH
T19A95E092F245A8E9E80721B59C79CA2214077E7D0AB9564F35CF372959B338231B7E0F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery

Malware Config

Signatures

Executes dropped EXE 1 IoCs

pid	Process
2516	3D4D.tmp

System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2026-07-13_1bc3c1179c5cb13edd8b473c4a19e659_amadey_elex_loda_rhadamanthys_smoke-loader.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	3D4D.tmp

System Network Configuration Discovery: Internet Connection Discovery 1 TTPs 1 IoCs

Adversaries may check for Internet connectivity on compromised systems.

discovery

Internet Connection Discovery

T1016.001

pid	Process
2516	3D4D.tmp

Suspicious use of WriteProcessMemory 1 IoCs

description	pid	Process	procid_target
PID 4308 wrote to memory of 2516	4308	2026-07-13_1bc3c1179c5cb13edd8b473c4a19e659_amadey_elex_loda_rhadamanthys_smoke-loader.exe	88

C:\Users\Admin\AppData\Local\Temp\2026-07-13_1bc3c1179c5cb13edd8b473c4a19e659_amadey_elex_loda_rhadamanthys_smoke-loader.exe
"C:\Users\Admin\AppData\Local\Temp\2026-07-13_1bc3c1179c5cb13edd8b473c4a19e659_amadey_elex_loda_rhadamanthys_smoke-loader.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:4308
- C:\Users\Admin\AppData\Local\Temp\3D4D.tmp
  "C:\Users\Admin\AppData\Local\Temp\3D4D.tmp" --pingC:\Users\Admin\AppData\Local\Temp\2026-07-13_1bc3c1179c5cb13edd8b473c4a19e659_amadey_elex_loda_rhadamanthys_smoke-loader.exe EE71C00D75C14AEA6AF9422CD37FF23857B2EDAB6ADC2B00CC512555E31DE3672414D40BA73C548FD1F90D3A22A0093289F888372475181D97A27F62357A3A05
  2⤵
  - Executes dropped EXE
  - System Location Discovery: System Language Discovery
  - System Network Configuration Discovery: Internet Connection Discovery
  PID:2516

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

System Network Configuration Discovery

T1016

Internet Connection Discovery

T1016.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

3D4D.tmp

Path C:\Users\Admin\AppData\Local\Temp\3D4D.tmp
Size 2.0MB
SHA256 bb9137f82ea93b169aa74f1ab8653cb9c8e8db757016209e405008e0b10ed3a6
MD5 f8ca78e270891d02672a5ed07f962efb
SHA1 5d5fee9ea87fd36b821e170aaf72c7172e68255f
SHA512 a4bd10db4498dd474210e9150c54250fcdccdc5687f39cf3fecbfd4fba6bf94bacf2cf19e702eb8b33ca430981e1e3ce37317b125d6a106615cb4565a5da2fd4
SSDEEP 49152:gtrGEQDdEqHmH4afCNEBC2XhXhqTpm+z7fCHVe:+aEAdEqHmhCNEo2xQIAm
TLSH
T13895D091F245A8E9E80321B55D7DCA2224077E7D4AB9564E35CF362989B338331B7E0F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads