0f323017f330b9e7d60f24fc45e45cc4e8a9190a15b698493b0a2876305665a9

Analysis

max time kernel
148s
max time network
126s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
30/09/2026, 14:29

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-09-30_030ddcab6c74375977015d1ffc51c81a_bkransomware_elex_maze_rhadamanthys_smoke-loader.exe
Size 475KB
Sample260930-rt2mbasw9l
SHA256 0f323017f330b9e7d60f24fc45e45cc4e8a9190a15b698493b0a2876305665a9
MD5 030ddcab6c74375977015d1ffc51c81a
SHA1 64895183fb49d3c932b70c88ed9e76eac8972015
SHA512 c4f31b1125423e04b9e9650e89502878341f80b2a7d1c374768f3c66a9e6470d5a61a50582f9ed02beaf6b20aa8fe5ad10f1fa0520330fbf7b56fb0b1a41e7b5
SSDEEP 6144:CER/W0fO6ZER/W0RO69PsVgwMqOIMDJvDUuI2D:ztfJWtRJ+VgwMq/cdDUq
TLSH
T15FA41902B6EA4220F0F35779147556618B3BBD65AE3A8E5E128C140D4FFB580AE71FB3
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2026-09-30_030ddcab6c74375977015d1ffc51c81a_bkransomware_elex_maze_rhadamanthys_smoke-loader.exe

C:\Users\Admin\AppData\Local\Temp\2026-09-30_030ddcab6c74375977015d1ffc51c81a_bkransomware_elex_maze_rhadamanthys_smoke-loader.exe
"C:\Users\Admin\AppData\Local\Temp\2026-09-30_030ddcab6c74375977015d1ffc51c81a_bkransomware_elex_maze_rhadamanthys_smoke-loader.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:4864

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads