Analysis
- max time kernel
149s - max time network
145s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
12/08/2026, 04:28
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-12_a8d103581027d59c703c8ac217a0999a_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-12_a8d103581027d59c703c8ac217a0999a_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
General
- Target 2026-08-12_a8d103581027d59c703c8ac217a0999a_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee.exe
- Size 167KB
- Sample260812-e3z4maal8s
- SHA256 f7d94ec28b08cb4741de56e46175312ee59e18776194350b024f142058485e4b
- MD5 a8d103581027d59c703c8ac217a0999a
- SHA1 95f54299288c1e39f5c1fe8786703b5ce81b9c2c
- SHA512 bd265574758385920ae2e6816663a394e4ebc6f20649c6373f3e9e0108708b5bb181cb7c5630a78c05fc7b259db15ba7a6cac41c2e2f53e1e38825280824f908
- SSDEEP 3072:6r752KqgKRlaogV2pmzMlu3/CNEya0uhMcB:252KqgylaogwmEu3/Cef
- TLSH T19CF38C3136C0C4B6D496213299B8DFB61DBEF4724B7941CBB3980A7E0F646D25A38397
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-12_a8d103581027d59c703c8ac217a0999a_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-08-12_a8d103581027d59c703c8ac217a0999a_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee.exe"C:\Users\Admin\AppData\Local\Temp\2026-08-12_a8d103581027d59c703c8ac217a0999a_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee.exe"1⤵
- System Location Discovery: System Language Discovery
PID:5536