Overview

overview

10

Static

static

3

rh_0.4.9.exe

windows7-x64

10

rh_0.4.9.exe

windows10-2004-x64

10

Resubmissions

27-11-2024 10:04

241127-l339lsypcw 10

15-08-2023 02:59

230815-dg72nsgd39 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    rh_0.4.9.exe

  • Size

    456KB

  • Sample

    230815-dg72nsgd39

  • MD5

    101c823784ccb04983205c7e006ac89a

  • SHA1

    4b983830e4c2c8f9dc3081828d936e51fe2fe3a5

  • SHA256

    603dd803082a1d92a46319990eb7fadc16a9ba223a605d1f7c6e31f11c2b03e5

  • SHA512

    c66e4506620285530e034edecf3fe4a56036a2b3bb57fa285c395017bb8687303c8880f637abe16c785801d030a458e80c449f4f61774bc39b5eaf9000f01a5b

  • SSDEEP

    6144:2uWP/BtSnurUylcrGYlnIttxv8HbcLgsd1Gus5psdrvV44dixP+MHDkBYdxtG9+u:2uWP/BZUyoLu8Agsmxwrvejkd2

Score
10/10
rhadamanthysstealer

Malware Config

Targets

    • Target

      rh_0.4.9.exe

    • Size

      456KB

    • MD5

      101c823784ccb04983205c7e006ac89a

    • SHA1

      4b983830e4c2c8f9dc3081828d936e51fe2fe3a5

    • SHA256

      603dd803082a1d92a46319990eb7fadc16a9ba223a605d1f7c6e31f11c2b03e5

    • SHA512

      c66e4506620285530e034edecf3fe4a56036a2b3bb57fa285c395017bb8687303c8880f637abe16c785801d030a458e80c449f4f61774bc39b5eaf9000f01a5b

    • SSDEEP

      6144:2uWP/BtSnurUylcrGYlnIttxv8HbcLgsd1Gus5psdrvV44dixP+MHDkBYdxtG9+u:2uWP/BZUyoLu8Agsmxwrvejkd2

    Score
    10/10
    rhadamanthysstealer

    • Detect rhadamanthys stealer shellcode

    • Rhadamanthys

      Rhadamanthys is an info stealer written in C++ first seen in August 2022.

      stealerrhadamanthys

    • Suspicious use of NtCreateUserProcessOtherParentProcess

    • Deletes itself

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks