Analysis
- max time kernel
150s - max time network
114s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
25/09/2026, 09:37
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-24_556a331958e7aa493b2b93fe3ba72cea_amadey_elex_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260911-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-24_556a331958e7aa493b2b93fe3ba72cea_amadey_elex_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win11ltsc2024-20260911-en
1 signatures
150 seconds
General
- Target 2026-09-24_556a331958e7aa493b2b93fe3ba72cea_amadey_elex_rhadamanthys_smoke-loader_stealc_stop.exe
- Size 167KB
- Sample260925-llws7sda87
- SHA256 cbbe9c460997fc6151e64de6cd0d666a171bf827e8a9f8dbe2b946ec158eea0f
- MD5 556a331958e7aa493b2b93fe3ba72cea
- SHA1 cc62ed3b5146e8649f475f8d8a3e86cbcd999577
- SHA512 31ef1f714b9bb53710faed361a7838f9a5e2194c3b1e203ed11bbbed4b8337e291d47e3e04d4099c39e402d33c643fcf55e543693bf10a62094724bdc7d9a269
- SSDEEP 3072:itSjG7vlAAdXlbiYIZ8H5MHgU05oDy9X:itSjAvUhHgum9X
- TLSH T153F35B127690C0B1DC3949736054AE261B79AD3AC3E1498F6F647EBA0E3F3E3513935A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-09-24_556a331958e7aa493b2b93fe3ba72cea_amadey_elex_rhadamanthys_smoke-loader_stealc_stop.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-09-24_556a331958e7aa493b2b93fe3ba72cea_amadey_elex_rhadamanthys_smoke-loader_stealc_stop.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-24_556a331958e7aa493b2b93fe3ba72cea_amadey_elex_rhadamanthys_smoke-loader_stealc_stop.exe"1⤵
- System Location Discovery: System Language Discovery
PID:4200