General
-
Target
Launcher.exe
-
Size
148.9MB
-
Sample
230827-2jnmtafe7x
-
MD5
0413f927661212f44a19475d7110e97d
-
SHA1
3f4431b1e32995777a7d234a2e7604674d7763e0
-
SHA256
8df009feace560a1ad2466d60cb90b5be793021b2fbb5af90a13645a137e317e
-
SHA512
15e94706d36e419adefe51be8566d41e945d30e8fc89dbcc19d67da9efe823665b54064a8a246d8a61c5bf8760d196f00f46fe11f04c5e9992f9e8ac5cb89035
-
SSDEEP
786432:A5N1mgE/WgDe6UmdCvF4N3RtI9n1gqBf8IC3ZNXDPWsUwZnb5xFTtLwSTRpf4P1d:qSgU/UmamUyqt8yctjdqSjR2
Static task
static1
Behavioral task
behavioral1
Sample
Launcher.exe
Resource
win7-20230824-en
Behavioral task
behavioral2
Sample
Launcher.exe
Resource
win10-20230703-en
Malware Config
Targets
-
-
Target
Launcher.exe
-
Size
148.9MB
-
MD5
0413f927661212f44a19475d7110e97d
-
SHA1
3f4431b1e32995777a7d234a2e7604674d7763e0
-
SHA256
8df009feace560a1ad2466d60cb90b5be793021b2fbb5af90a13645a137e317e
-
SHA512
15e94706d36e419adefe51be8566d41e945d30e8fc89dbcc19d67da9efe823665b54064a8a246d8a61c5bf8760d196f00f46fe11f04c5e9992f9e8ac5cb89035
-
SSDEEP
786432:A5N1mgE/WgDe6UmdCvF4N3RtI9n1gqBf8IC3ZNXDPWsUwZnb5xFTtLwSTRpf4P1d:qSgU/UmamUyqt8yctjdqSjR2
Score10/10-
Detect rhadamanthys stealer shellcode
-
Rhadamanthys
Rhadamanthys is an info stealer written in C++ first seen in August 2022.
-
Executes dropped EXE
-
Loads dropped DLL
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Suspicious use of SetThreadContext
-