General
-
Target
g2m.dll
-
Size
130.0MB
-
Sample
240403-yb993aaf4z
-
MD5
0722be7f0411d54e95107a11836c6e03
-
SHA1
b39f9247119b18fc9c846f73c810f426015b964b
-
SHA256
8814bdaaf5c686485ef864c25e2524e662dcfc37a393b0d8faa8d74a556df4b3
-
SHA512
0116217df19b9cc76c0301a7838fb08221a71696d9dc4c82895faae67d8495bd63b4b61d2fa0c8a3a76311faac3d85f2a95b16c8a47ade3e428102769323d13b
-
SSDEEP
786432:fUP7GCGO7b0Srkx/tC0SzIdSwh/WxbpNHQD3trzRp:fUP7GCG64Srkx1hSzYsHQD3t/R
Static task
static1
Behavioral task
behavioral1
Sample
g2m.dll
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
g2m.dll
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
g2m.dll
-
Size
130.0MB
-
MD5
0722be7f0411d54e95107a11836c6e03
-
SHA1
b39f9247119b18fc9c846f73c810f426015b964b
-
SHA256
8814bdaaf5c686485ef864c25e2524e662dcfc37a393b0d8faa8d74a556df4b3
-
SHA512
0116217df19b9cc76c0301a7838fb08221a71696d9dc4c82895faae67d8495bd63b4b61d2fa0c8a3a76311faac3d85f2a95b16c8a47ade3e428102769323d13b
-
SSDEEP
786432:fUP7GCGO7b0Srkx/tC0SzIdSwh/WxbpNHQD3trzRp:fUP7GCG64Srkx1hSzYsHQD3t/R
Score10/10-
Rhadamanthys
Rhadamanthys is an info stealer written in C++ first seen in August 2022.
-
Suspicious use of NtCreateUserProcessOtherParentProcess
-