General
- Target LWClient.exe
- Size 355KB
- Sample240407-l2jhtaac81
- SHA256 6135bdbcfd9f824b3da0bef2ba73018a998967e20c5d0274c6a1c0433649b017
- MD5 bb84cc2853596d21a318576c4995fcce
- SHA1 477a224d5b4e398b34a978ac19def1cbafb211d3
- SHA512 aa32be3d91bf6e2c8fed0d0e0407723466b477ab0d27c5d3cd705ac73365ab4c56de4f16d4786ee586e750d6835eba09775dbf5a93b0da0eaea4326f2fc2bd5c
- SSDEEP 6144:g2qezd2ab1/RuHk+M3k8M3W7XomjOJCqshrOlumY6DMIewgxQfqksb:gf2R/EEkCQFYDwRqv
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
LWClient.exe
Resource
win11-20240319-en
4 signatures
60 seconds
Malware Config
Targets
-
- Target LWClient.exe
- Size 355KB
- SHA256 6135bdbcfd9f824b3da0bef2ba73018a998967e20c5d0274c6a1c0433649b017
- MD5 bb84cc2853596d21a318576c4995fcce
- SHA1 477a224d5b4e398b34a978ac19def1cbafb211d3
- SHA512 aa32be3d91bf6e2c8fed0d0e0407723466b477ab0d27c5d3cd705ac73365ab4c56de4f16d4786ee586e750d6835eba09775dbf5a93b0da0eaea4326f2fc2bd5c
- SSDEEP 6144:g2qezd2ab1/RuHk+M3k8M3W7XomjOJCqshrOlumY6DMIewgxQfqksb:gf2R/EEkCQFYDwRqv
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Rhadamanthys
Rhadamanthys is an info stealer written in C++ first seen in August 2022.
-
Suspicious use of NtCreateUserProcessOtherParentProcess