cfcd685a9f23bedc589c63d04001ce4ae4a38b90a8471f595812c49539dfc3e0

Analysis

max time kernel
150s
max time network
115s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
10/08/2026, 23:54

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-08-10_5134a87eb43830f1316b16ebce1973d9_amadey_elex_rhadamanthys_smoke-loader_stop.exe
Size 1.4MB
Sample260810-3yb31abc86
SHA256 cfcd685a9f23bedc589c63d04001ce4ae4a38b90a8471f595812c49539dfc3e0
MD5 5134a87eb43830f1316b16ebce1973d9
SHA1 4721d006fd4d2a26108492d11b689d504ed70484
SHA512 fdec25a0204f44d372b845aee14a02699878c6a701e1d4a4c2e9c35af5f9f67236ae790b10daaed25359b85b8e556704b912407f43c885434489b444a8c81d5e
SSDEEP 12288:bVhJ6RQwhmPISQblAHadCC0+ziqgp+SRDDu4wKolH+:uzQPI9hAH8CzQgAqvuG
TLSH
T1D365234AB49585B3D90F0BB648978FD10ABE5C633BD2727F672204568BBB1CC590A2F1
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2026-08-10_5134a87eb43830f1316b16ebce1973d9_amadey_elex_rhadamanthys_smoke-loader_stop.exe

C:\Users\Admin\AppData\Local\Temp\2026-08-10_5134a87eb43830f1316b16ebce1973d9_amadey_elex_rhadamanthys_smoke-loader_stop.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-10_5134a87eb43830f1316b16ebce1973d9_amadey_elex_rhadamanthys_smoke-loader_stop.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:6792

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/6792-0-0x0000000000400000-0x000000000055F000-memory.dmp

Download

memory/6792-1-0x0000000000990000-0x00000000009F6000-memory.dmp

Download

memory/6792-7-0x0000000000990000-0x00000000009F6000-memory.dmp

Download

memory/6792-6-0x0000000000990000-0x00000000009F6000-memory.dmp

Download

memory/6792-11-0x0000000000400000-0x000000000055F000-memory.dmp

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads