Overview

overview

10

Static

static

3

af1efddb3a...68.exe

windows7-x64

10

af1efddb3a...68.exe

windows10-2004-x64

10

Resubmissions

27-11-2024 10:01

241127-l2hxaaynew 10

27-06-2023 19:51

230627-yktcxagb71 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    af1efddb3afaf3bf4d121a9d4c7e7d68.exe

  • Size

    444KB

  • Sample

    230627-yktcxagb71

  • MD5

    af1efddb3afaf3bf4d121a9d4c7e7d68

  • SHA1

    f9943a72ca72fd7a7a3495d039cf37a0decb3998

  • SHA256

    7d2102bb62f4eb41eac647e66f4f37eabce90eece6e0589603108b03ebfe300c

  • SHA512

    efe933bb51b5abc0a8799dc0dd28f35c9ccaa7a8d09083649645640eb8015e594a46bc6cf2c721787e47b6239fafebb766832de98b770f087005a3f50612f710

  • SSDEEP

    6144:IjKvnAzRPqkroWhcrTIhB1uA2dOJhhgWbMbitWGFNuldsfiy3NiGA:Ijzgk06oIuA6ahE+F0/y36

Score
10/10
rhadamanthyscollectionstealer

Malware Config

Targets

    • Target

      af1efddb3afaf3bf4d121a9d4c7e7d68.exe

    • Size

      444KB

    • MD5

      af1efddb3afaf3bf4d121a9d4c7e7d68

    • SHA1

      f9943a72ca72fd7a7a3495d039cf37a0decb3998

    • SHA256

      7d2102bb62f4eb41eac647e66f4f37eabce90eece6e0589603108b03ebfe300c

    • SHA512

      efe933bb51b5abc0a8799dc0dd28f35c9ccaa7a8d09083649645640eb8015e594a46bc6cf2c721787e47b6239fafebb766832de98b770f087005a3f50612f710

    • SSDEEP

      6144:IjKvnAzRPqkroWhcrTIhB1uA2dOJhhgWbMbitWGFNuldsfiy3NiGA:Ijzgk06oIuA6ahE+F0/y36

    Score
    10/10
    rhadamanthyscollectionstealer

    • Detect rhadamanthys stealer shellcode

    • Rhadamanthys

      Rhadamanthys is an info stealer written in C++ first seen in August 2022.

      stealerrhadamanthys

    • Suspicious use of NtCreateUserProcessOtherParentProcess

    • Deletes itself

    • Accesses Microsoft Outlook profiles

      collection
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks