Analysis
- max time kernel
148s - max time network
126s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260710-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
21/08/2026, 04:29
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-21_63b1323a5ffafe0350f6a6aed4d0d790_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-21_63b1323a5ffafe0350f6a6aed4d0d790_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win11ltsc2024-20260710-en
1 signatures
150 seconds
General
- Target 2026-08-21_63b1323a5ffafe0350f6a6aed4d0d790_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
- Size 89KB
- Sample260821-e4fflsgm5v
- SHA256 97a49d3a0c331daad29f0cdd63f46cfd1890689c8d24b13c8432b9d866c3411a
- MD5 63b1323a5ffafe0350f6a6aed4d0d790
- SHA1 fac588e60a1f550818c5f53afdaad29b912b5d7b
- SHA512 713ded3756d7a71107a0f70f177d23e70129896754966c95485f6a82b5572023c45bfb75413bb691d4405541f4838245e8e0a7ad450f1435e4652d8abf147454
- SSDEEP 1536:LujLu3MMj9/Wq5LRp7Rh3Jvl0doaU3O7a3Dx1zTWT++knWV7/ymSmC3Nsctn7mj7:LujLvMj9v7Rh3JN44DLzXmuzBQhQcx
- TLSH T149939D026CA3C136F0292AB445E6E6C418EF24D702D0104FFBB99DFECF62AD5452A7D6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-21_63b1323a5ffafe0350f6a6aed4d0d790_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-08-21_63b1323a5ffafe0350f6a6aed4d0d790_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe"C:\Users\Admin\AppData\Local\Temp\2026-08-21_63b1323a5ffafe0350f6a6aed4d0d790_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe"1⤵
- System Location Discovery: System Language Discovery
PID:4932