General
- Target SecuriteInfo.com.Variant.Tedy.568425.31329.990
- Size 362KB
- Sample240409-vxsqcsdd68
- SHA256 a443c5aeabce4b1b544473a6016e240fd8572610ad5cea050b1b3cca122241f0
- MD5 37df2e853b4a195f4c9af1d6f988d7fd
- SHA1 74b984017ad6f287aba483f87cc217bc74ea2457
- SHA512 09e4bfd1ad54dec5944c30abd04a9af6f33fc057a0c4297223d8c87b89310932d20ab18afc58212a821a03027d07da08a86105b5bcde97c01bba5dff5c5b2331
- SSDEEP 6144:Ahuyfs/3y6zgkCggeYa+D1kZkRLROvcsyetnpgvX/KE1VisG:A2LgrgM9Zk+RQvciA/KEI
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
SecuriteInfo.com.Variant.Tedy.568425.31329.exe
Resource
win7-20231129-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
SecuriteInfo.com.Variant.Tedy.568425.31329.exe
Resource
win10v2004-20240226-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target SecuriteInfo.com.Variant.Tedy.568425.31329.990
- Size 362KB
- SHA256 a443c5aeabce4b1b544473a6016e240fd8572610ad5cea050b1b3cca122241f0
- MD5 37df2e853b4a195f4c9af1d6f988d7fd
- SHA1 74b984017ad6f287aba483f87cc217bc74ea2457
- SHA512 09e4bfd1ad54dec5944c30abd04a9af6f33fc057a0c4297223d8c87b89310932d20ab18afc58212a821a03027d07da08a86105b5bcde97c01bba5dff5c5b2331
- SSDEEP 6144:Ahuyfs/3y6zgkCggeYa+D1kZkRLROvcsyetnpgvX/KE1VisG:A2LgrgM9Zk+RQvciA/KEI
- MD5 SHA1 SHA512 SSDEEP
Score10/10Rhadamanthys
Rhadamanthys is an info stealer written in C++ first seen in August 2022.
Suspicious use of NtCreateUserProcessOtherParentProcess
Deletes itself