User tags

Assigned on submission by the user, not by sandbox detections.

Threatview.io Proactive Hunter

General

  • Target

    sample4.exe

  • Size

    536KB

  • Sample

    240407-cmermsah27

  • MD5

    8cca1082f0cb2ab2b60025033d56af56

  • SHA1

    f3f4fd5a12031d7d1f86bec1665576c5ddab2936

  • SHA256

    70a7c05b84920869900bfb4d677f13d57ced658d907d495a1ffe66e1b0d420da

  • SHA512

    9dd1780ec90e6affd740a52356479280d2877366b3f1f341e43117a17989e5b8711e2cb26fb6b47f8671603f891cdc6e4934e922cc28d507632f621b135ff494

  • SSDEEP

    12288:YpfMhcqJOtdh15RgDKKw780M4Z2hHX34:YUNujRgy7hIh334

Score
10/10

Malware Config

Targets

    • Target

      sample4.exe

    • Size

      536KB

    • MD5

      8cca1082f0cb2ab2b60025033d56af56

    • SHA1

      f3f4fd5a12031d7d1f86bec1665576c5ddab2936

    • SHA256

      70a7c05b84920869900bfb4d677f13d57ced658d907d495a1ffe66e1b0d420da

    • SHA512

      9dd1780ec90e6affd740a52356479280d2877366b3f1f341e43117a17989e5b8711e2cb26fb6b47f8671603f891cdc6e4934e922cc28d507632f621b135ff494

    • SSDEEP

      12288:YpfMhcqJOtdh15RgDKKw780M4Z2hHX34:YUNujRgy7hIh334

    Score
    10/10
    • Rhadamanthys

      Rhadamanthys is an info stealer written in C++ first seen in August 2022.

    • Suspicious use of NtCreateUserProcessOtherParentProcess

MITRE ATT&CK Matrix

Tasks