Analysis
- max time kernel
148s - max time network
134s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
09/08/2026, 00:20
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-08_257b0539b34521e6e4220c7ef20d5631_amadey_elex_karagany_redline-stealer_rhadamanthys_smoke-loader_stealc.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-08_257b0539b34521e6e4220c7ef20d5631_amadey_elex_karagany_redline-stealer_rhadamanthys_smoke-loader_stealc.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
General
- Target 2026-08-08_257b0539b34521e6e4220c7ef20d5631_amadey_elex_karagany_redline-stealer_rhadamanthys_smoke-loader_stealc.exe
- Size 54KB
- Sample260809-am7rbaxbng
- SHA256 beb375e1f034bb31d0bd8db713e29aa8ea02a29e0ada8721a3ef8ae0021b0f48
- MD5 257b0539b34521e6e4220c7ef20d5631
- SHA1 690b3a175447332e4fe6188207ad4bff566a0834
- SHA512 0abec80c1ce68edc4992f14118267a545ee6f21b89ed5cd23f7889bb3f3faa6dbb2a34b1b6c0b467613379e2594f33bf8ca6d07a57f27f13b64579608d4f57ac
- SSDEEP 768:T/EAAqxG0QqLccK+xL7scaOZ/IcGs8WbwnWh+6AXT2qEDnXbiPGEDUXnpT0rJmnU:QAc0QqgHW7/ZwcF8c6jELX+PupTNj
- TLSH T105435B253594C032DCA215300978D2A25A7F78326678858B7FE8677DAFF17C09B2937B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-08_257b0539b34521e6e4220c7ef20d5631_amadey_elex_karagany_redline-stealer_rhadamanthys_smoke-loader_stealc.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-08-08_257b0539b34521e6e4220c7ef20d5631_amadey_elex_karagany_redline-stealer_rhadamanthys_smoke-loader_stealc.exe"C:\Users\Admin\AppData\Local\Temp\2026-08-08_257b0539b34521e6e4220c7ef20d5631_amadey_elex_karagany_redline-stealer_rhadamanthys_smoke-loader_stealc.exe"1⤵
- System Location Discovery: System Language Discovery
PID:4968