Analysis
- max time kernel
148s - max time network
142s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
27/10/2026, 01:25
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-26_fa8f21120d6805211ccff0d220e556ce_amadey_elex_manuscrypt_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260911-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-26_fa8f21120d6805211ccff0d220e556ce_amadey_elex_manuscrypt_rhadamanthys_smoke-loader_stop.exe
Resource
win11ltsc2024-20260911-en
1 signatures
150 seconds
General
- Target 2026-10-26_fa8f21120d6805211ccff0d220e556ce_amadey_elex_manuscrypt_rhadamanthys_smoke-loader_stop.exe
- Size 115KB
- Sample261027-bs2b6azzfx
- SHA256 8d133761b33462a437c21f24cc7e9f31202a2d6ba9ebbbc3c07b3f5888ce8939
- MD5 fa8f21120d6805211ccff0d220e556ce
- SHA1 63e48c1b528ec89e11ad19cf8b84b82917c60c63
- SHA512 e4a97d163afcfe807579f40f8051fbf2810a5e5987e00e9b4d25ba67e407b25a99ae61c974044d37e66407bbb34379dde2a32c03270349067e9e64a771f681a6
- SSDEEP 1536:ZPCSSAAF8Qy+iMrH/b0reaIxkUBJT3rm4ejFK/xSVGuOvQY+rWQyuy:9CqO8Q0MrH/sA1bwMZShTY+rWQyh
- TLSH T119B39E2172D1C473C48254358411D7F05ABFF9325BAAA9CBB7B81BBE5F202E0563A397
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-10-26_fa8f21120d6805211ccff0d220e556ce_amadey_elex_manuscrypt_rhadamanthys_smoke-loader_stop.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-10-26_fa8f21120d6805211ccff0d220e556ce_amadey_elex_manuscrypt_rhadamanthys_smoke-loader_stop.exe"C:\Users\Admin\AppData\Local\Temp\2026-10-26_fa8f21120d6805211ccff0d220e556ce_amadey_elex_manuscrypt_rhadamanthys_smoke-loader_stop.exe"1⤵
- System Location Discovery: System Language Discovery
PID:5908