General
- Target b70551e4d13eb8402086eaf874d6914c.exe
- Size 3.0MB
- Sample240321-ybtbjsaa51
- SHA256 e2a1ffc36a8c09c6944e33cdfecb9dced2221c2bf9b05c5a5037058f3a90839a
- MD5 b70551e4d13eb8402086eaf874d6914c
- SHA1 9da72768e92371683bfa46ff21e05c4f625af1d5
- SHA512 9aad2a43d18e7e31bca3393cc4f30eb8667be55b181f01722be6cd6fab1cd854266937edd3009fad08bcd7dee2355c6a40e9a5d9578701d8de8a328c9ebd5611
- SSDEEP 49152:cNiyOYZbs5ncvN/wdmZcYJJVH2HPjWTt+hTXaXLo4:cVOXcvWdmJJzHTTt+0Lo4
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
b70551e4d13eb8402086eaf874d6914c.exe
Resource
win7-20240221-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
b70551e4d13eb8402086eaf874d6914c.exe
Resource
win10v2004-20240226-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target b70551e4d13eb8402086eaf874d6914c.exe
- Size 3.0MB
- SHA256 e2a1ffc36a8c09c6944e33cdfecb9dced2221c2bf9b05c5a5037058f3a90839a
- MD5 b70551e4d13eb8402086eaf874d6914c
- SHA1 9da72768e92371683bfa46ff21e05c4f625af1d5
- SHA512 9aad2a43d18e7e31bca3393cc4f30eb8667be55b181f01722be6cd6fab1cd854266937edd3009fad08bcd7dee2355c6a40e9a5d9578701d8de8a328c9ebd5611
- SSDEEP 49152:cNiyOYZbs5ncvN/wdmZcYJJVH2HPjWTt+hTXaXLo4:cVOXcvWdmJJzHTTt+0Lo4
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Rhadamanthys
Rhadamanthys is an info stealer written in C++ first seen in August 2022.
-
Suspicious use of NtCreateUserProcessOtherParentProcess
-
Executes dropped EXE
-
Loads dropped DLL
-
Suspicious use of SetThreadContext