Analysis
- max time kernel
148s - max time network
115s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
21/08/2026, 00:50
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-20_1ca8f5477c34fd64b4fbd57e2b66f491_amadey_elex_hawkeye_maze_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-20_1ca8f5477c34fd64b4fbd57e2b66f491_amadey_elex_hawkeye_maze_rhadamanthys_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
General
- Target 2026-08-20_1ca8f5477c34fd64b4fbd57e2b66f491_amadey_elex_hawkeye_maze_rhadamanthys_smoke-loader.exe
- Size 227KB
- Sample260821-a6767azbne
- SHA256 b072f1572f1e91e73b42254800474f83ffeb5be370c46c3cb143cf5dfced061a
- MD5 1ca8f5477c34fd64b4fbd57e2b66f491
- SHA1 e8be85be563c68f1cd72ce8332ca4f3a168ea388
- SHA512 270ec4a43e350fd8209bb08fd70213d2ed6c8c6dd5eafd9abb58bd8133242e29aaaa4f9073747295e96ea2a4b63c37a2c2b636aa3f669b14a95c798f02479aa3
- SSDEEP 3072:QTDXPIS1blQmbVRyt9822RecS+EqClkN+OqlzM+a1MH3KhD:m7P/1Om5V3KK+FGyAD
- TLSH T128348D0277C2C8B2D7A3017345E59B66667EBD324A259A4BB3D80F0DCE741C1FA36762
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-20_1ca8f5477c34fd64b4fbd57e2b66f491_amadey_elex_hawkeye_maze_rhadamanthys_smoke-loader.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-08-20_1ca8f5477c34fd64b4fbd57e2b66f491_amadey_elex_hawkeye_maze_rhadamanthys_smoke-loader.exe"C:\Users\Admin\AppData\Local\Temp\2026-08-20_1ca8f5477c34fd64b4fbd57e2b66f491_amadey_elex_hawkeye_maze_rhadamanthys_smoke-loader.exe"1⤵
- System Location Discovery: System Language Discovery
PID:6080