Analysis
- max time kernel
148s - max time network
125s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
07/10/2026, 04:49
Behavioral task
behavioral1
Sample
2026-10-05_1ffe18c07b27008abf2772109ecc700b_elex_karagany_manuscrypt_maze_rhadamanthys_stop.exe
Resource
win10v2004-20260911-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-05_1ffe18c07b27008abf2772109ecc700b_elex_karagany_manuscrypt_maze_rhadamanthys_stop.exe
Resource
win11ltsc2024-20260911-en
1 signatures
150 seconds
General
- Target 2026-10-05_1ffe18c07b27008abf2772109ecc700b_elex_karagany_manuscrypt_maze_rhadamanthys_stop.exe
- Size 103KB
- Sample261007-ffwcladw8q
- SHA256 44734d48ff14aedb2cf0e4a5b1f6eee4ed8abf0b44e562124df832eedb5e2b63
- MD5 1ffe18c07b27008abf2772109ecc700b
- SHA1 68800008d628883c266a804dbac261128f76c2f6
- SHA512 bee8d7706d37c8c115fc02a9f8086198411142d3ad2f21cf838fdb3d715f1a88d40c7ed2210cf73a4230e277c05c31485a7ffe106f836060271a9d89f8d10c8b
- SSDEEP 1536:fQl9c+jbjwBpfnkpBCgTbe62CZcb9cp+CcV1n9s8jcd9MVCSTS:wc+jnwHg/Tbe62CRp+Ho9MVCSTS
- TLSH T164A37D1175D1C070E4B7423A08A49E514A7FFE364F319E8B3BE8129E5A752E05B36BB3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-10-05_1ffe18c07b27008abf2772109ecc700b_elex_karagany_manuscrypt_maze_rhadamanthys_stop.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-10-05_1ffe18c07b27008abf2772109ecc700b_elex_karagany_manuscrypt_maze_rhadamanthys_stop.exe"C:\Users\Admin\AppData\Local\Temp\2026-10-05_1ffe18c07b27008abf2772109ecc700b_elex_karagany_manuscrypt_maze_rhadamanthys_stop.exe"1⤵
- System Location Discovery: System Language Discovery
PID:4864