Analysis
- max time kernel
148s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
03/10/2026, 22:58
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-03_f9d73360ea6cf55a55d6cf1e7f4d0530_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260911-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-03_f9d73360ea6cf55a55d6cf1e7f4d0530_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260911-en
1 signatures
150 seconds
General
- Target 2026-10-03_f9d73360ea6cf55a55d6cf1e7f4d0530_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
- Size 1.7MB
- Sample261003-2x1jjayekd
- SHA256 7adb737c401d47b5b159e0269c794f2c5022b78e3abf1dbdc435b91113429aec
- MD5 f9d73360ea6cf55a55d6cf1e7f4d0530
- SHA1 a9048c28186e7bf6c884139faba21e5e7e37174a
- SHA512 b66ca2f88986479f2cc20ea092c60e528b38c50aed5525198404bbc7bf6b185f47f4072e511530675bd4c0c806b64eb5d63a100571948b091ad12efe69f90441
- SSDEEP 1536:YxKY+T6KW5CvEyXWvE344wAL5LO8XvdPTwZI3sq5gnzoIfnIOlIOjcTp5XEkd:CDKW1LgppLRHMY0zBfJvjcTp5XEkd
- TLSH T188856C2171C1C1B3C4B7113044E6CB799A7A7071077A96D7B6DD2BBA6E213E1A3362CE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-10-03_f9d73360ea6cf55a55d6cf1e7f4d0530_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-10-03_f9d73360ea6cf55a55d6cf1e7f4d0530_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe"C:\Users\Admin\AppData\Local\Temp\2026-10-03_f9d73360ea6cf55a55d6cf1e7f4d0530_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe"1⤵
- System Location Discovery: System Language Discovery
PID:5596