33d255b0d94f2b0c219815af20e56c38556b169c5e7b690ca9de2ed796d97789

Analysis

max time kernel
148s
max time network
150s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
20/07/2026, 16:01

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-07-20_471c185e5e844ded396d32c3ef2a2b02_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Size 76KB
Sample260720-tgn7kafv8m
SHA256 33d255b0d94f2b0c219815af20e56c38556b169c5e7b690ca9de2ed796d97789
MD5 471c185e5e844ded396d32c3ef2a2b02
SHA1 1e63638e68215a9dca66795b48c76b637e07c9ac
SHA512 46b56c23ab067b8ede12a6db52a4e04aba7ea12c3babd0a6db1ff728eb32450f3effacdaa7d6142a4149431c010e6f33840c4cded38d59d8f51a82e61113efcd
SSDEEP 768:01tj7LdCsxL1ZbzV9z0Tbc6FsOzdA6R4UWPYfIc/Qi3qEBQprdmc1tj7LdCsxL1g:0LL1/hV9z0zFxRoLOUprdmcLL1/g
TLSH
T188737D16B890C072C01194F8146AEA616F6FAC32279691CB3B9D767F5F312D2D23A35F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2026-07-20_471c185e5e844ded396d32c3ef2a2b02_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe

C:\Users\Admin\AppData\Local\Temp\2026-07-20_471c185e5e844ded396d32c3ef2a2b02_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
"C:\Users\Admin\AppData\Local\Temp\2026-07-20_471c185e5e844ded396d32c3ef2a2b02_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:1300

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads