General
- Target UpdatePack-KB971033-x64.exe.7z
- Size 445KB
- Sample230524-n253xscc86
- SHA256 df5db51c447e44c0753bde771c59f73a8266dad3fd0ab7189c2640bbf7ec5322
- MD5 331491e4c27c7a5cdfe4cb2f41574ba4
- SHA1 753e6069849f814fee74332311fe79260e65a3d0
- SHA512 562fa564fb5af91c542ee9112585f9542631f201b98bf3431a4beb03db117f852886bffc3ac4674b92ae4f9b21bd5d14a2a3633a54fe2268a01789514c2ac8cb
- SSDEEP 12288:LUIp+h2e3VK8usdndh4XX04N5R6pQq6bgpciBeV6:P8h2eFz1ndOXXrl6pQ0cMeV6
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Behavioral task
behavioral1
Sample
UpdatePack-KB971033-x64.exe
Resource
win10v2004-20230220-de
4 signatures
150 seconds
Malware Config
Targets
-
- Target UpdatePack-KB971033-x64.exe
- Size 656.4MB
- SHA256 1faa0a86d8c56f85c46e1790c28d3c382ba4de6c7a6c8a0187f38fa52ee3c60d
- MD5 70e0aff711faae8f8d22bd77a6360985
- SHA1 6a9a40557c9491f453f10bf4cced5acfb9b42149
- SHA512 8437b22e9f3f41cb92c19756bd0d7678245d38237eed682a97ff2f434977df6195712396f26480677a97fc29d3b5bbf789d5e40b5769d732df1f1fea025b2e34
- SSDEEP 6144:lMkSD+z3hVyHzDDzYepZZMSohQL6ncCDQRs3TXIrkUAlBSnSt/P:lu8kDPYs/johHREkDoSFP
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Rhadamanthys
Rhadamanthys is an info stealer written in C++ first seen in August 2022.
-
Uses the VBS compiler for execution
-
Suspicious use of SetThreadContext