911162580d8f991dce2f37b05c190cf37436291c48c071cc9bc57dd46f7d21d3

Analysis

max time kernel
148s
max time network
115s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
15/08/2026, 03:38

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-08-15_803d003b0679efaa99ad6d10aaa66ed7_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Size 82KB
Sample260815-d65mvayape
SHA256 911162580d8f991dce2f37b05c190cf37436291c48c071cc9bc57dd46f7d21d3
MD5 803d003b0679efaa99ad6d10aaa66ed7
SHA1 5e535b11d710286607ae76bbda0f2ec9b94c4d70
SHA512 8fbfe64303f1d33789a68c3f794fc51516af0cb614e5c63998b0980be8d3df6d18c75b48f837db5f90107a7abb156d66d5a10cca0896e0613fa6d45d6bcf1d35
SSDEEP 1536:6gV1I0Rh3ij+6ByqL4tXDL7P8EF5+07+7:6gguipYqLxEF5+0i
TLSH
T164837D62AA90C032E452557068A5C2715E7FF8321AB1C4CBB39B476E8F713C1A67E35E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2026-08-15_803d003b0679efaa99ad6d10aaa66ed7_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe

C:\Users\Admin\AppData\Local\Temp\2026-08-15_803d003b0679efaa99ad6d10aaa66ed7_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-15_803d003b0679efaa99ad6d10aaa66ed7_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:4792

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads