Analysis
- max time kernel
164s - max time network
165s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
04/08/2026, 08:46
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_fdfcc7991152e7d6f7436328807cd8da_amadey_elex_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_fdfcc7991152e7d6f7436328807cd8da_amadey_elex_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
General
- Target 2026-08-03_fdfcc7991152e7d6f7436328807cd8da_amadey_elex_rhadamanthys_smoke-loader_stealc_stop.exe
- Size 515KB
- Sample260804-kppzdsbm8s
- SHA256 9367d8f26edb05c2d5b3d5a6d7e49c00144f431a408bbe6ce7e7f54fef9ec3f6
- MD5 fdfcc7991152e7d6f7436328807cd8da
- SHA1 428761fbf88008b522908b6964a3a5963de83a1c
- SHA512 93e2bd3177a0155f1c04470819502ce0051531a9e9a5667c5baf17bf8e2d0c4b4f0bfa1a76d0acf697d11ffa5a7409fbf2869920e7db49114368e6142f268f08
- SSDEEP 12288:+YuOb3OjgBIvprVk3/N55555z66666vSSSSSG/:tuOisBGA/N55555z66666vSSSSSO
- TLSH T1E3B45B1263E08535F1F71B349A7657A51A3BFC22AD30C60F6BE82E5E2D70E409A35727
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-03_fdfcc7991152e7d6f7436328807cd8da_amadey_elex_rhadamanthys_smoke-loader_stealc_stop.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-08-03_fdfcc7991152e7d6f7436328807cd8da_amadey_elex_rhadamanthys_smoke-loader_stealc_stop.exe"C:\Users\Admin\AppData\Local\Temp\2026-08-03_fdfcc7991152e7d6f7436328807cd8da_amadey_elex_rhadamanthys_smoke-loader_stealc_stop.exe"1⤵
- System Location Discovery: System Language Discovery
PID:5108