Analysis
- max time kernel
148s - max time network
140s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
11/08/2026, 09:28
Behavioral task
behavioral1
Sample
2026-08-11_6a6c23d06a249f820df3aaf5bedf5cc7_elex_karagany_manuscrypt_maze_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-11_6a6c23d06a249f820df3aaf5bedf5cc7_elex_karagany_manuscrypt_maze_rhadamanthys_stop.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
General
- Target 2026-08-11_6a6c23d06a249f820df3aaf5bedf5cc7_elex_karagany_manuscrypt_maze_rhadamanthys_stop.exe
- Size 103KB
- Sample260811-lfazjsdf32
- SHA256 62b902dcd651864c5cb7e86b52f850fa63d9012e47ce623b38626a6d74ac0d4f
- MD5 6a6c23d06a249f820df3aaf5bedf5cc7
- SHA1 e2ec58399637e17ba82f8a3c3b21b67032682ffc
- SHA512 49405b976b9a06cad5408b431b1eee86fb14549fb4c8ab87f44baba10fdfdfe85dd03a468ed4bfd86dd04a8bb89ac242bade92c1c077ce7df4f541b1005bff4b
- SSDEEP 1536:fQl9c+jbjwBpfnkpBCgTbe62CZcb9Bp+CcV1n9s8jcd9MVCSTS:wc+jnwHg/Tbe62Cgp+Ho9MVCSTS
- TLSH T117A37D1175D1C070E4B7423A08A49E514A7FFE364F319E8B3BE8129E5A752E05B36BB3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-11_6a6c23d06a249f820df3aaf5bedf5cc7_elex_karagany_manuscrypt_maze_rhadamanthys_stop.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-08-11_6a6c23d06a249f820df3aaf5bedf5cc7_elex_karagany_manuscrypt_maze_rhadamanthys_stop.exe"C:\Users\Admin\AppData\Local\Temp\2026-08-11_6a6c23d06a249f820df3aaf5bedf5cc7_elex_karagany_manuscrypt_maze_rhadamanthys_stop.exe"1⤵
- System Location Discovery: System Language Discovery
PID:4920