General
- Target 09042024_2136_DRBS2279.exe
- Size 353KB
- Sample240409-qwb9rsbf3t
- SHA256 29f8b50f737feef9ec7439780daead395bf2bf278a4540ddffe64ca70aa9f462
- MD5 4a78707180195f7584386470809e4aec
- SHA1 0bc190b0cbb3983ce1b0bf7f5efa4a6f14955a78
- SHA512 785a0635bd215c67eefd23ad57b2193745220646bb58434d0d526e34d10560b6e8b43fbd23641d1632995ce311d820a439fc0733048e55c04baab2dbb8981b7a
- SSDEEP 6144:Iu4ypBt/6bC6p/8jJkJaVnQUKRnazBrRYJs3mb2stMK39V8s98ix2p:Iu1t/6+6pWG8aRna9RYSQTXtV8s98E2
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
09042024_2136_DRBS2279.exe
Resource
win7-20240221-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
09042024_2136_DRBS2279.exe
Resource
win10v2004-20240319-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 09042024_2136_DRBS2279.exe
- Size 353KB
- SHA256 29f8b50f737feef9ec7439780daead395bf2bf278a4540ddffe64ca70aa9f462
- MD5 4a78707180195f7584386470809e4aec
- SHA1 0bc190b0cbb3983ce1b0bf7f5efa4a6f14955a78
- SHA512 785a0635bd215c67eefd23ad57b2193745220646bb58434d0d526e34d10560b6e8b43fbd23641d1632995ce311d820a439fc0733048e55c04baab2dbb8981b7a
- SSDEEP 6144:Iu4ypBt/6bC6p/8jJkJaVnQUKRnazBrRYJs3mb2stMK39V8s98ix2p:Iu1t/6+6pWG8aRna9RYSQTXtV8s98E2
- MD5 SHA1 SHA512 SSDEEP
Score10/10Rhadamanthys
Rhadamanthys is an info stealer written in C++ first seen in August 2022.
Suspicious use of NtCreateUserProcessOtherParentProcess