General
- Target HEARTB.dll 1.7z
- Size 2.6MB
- Sample240417-qjwsmsha69
- SHA256 f12f784ecc9c86111f82c2deed84facffa8761629b9604eabbc7e89aa3157c45
- MD5 c1e4c68cac8617153c8ba118ac88999d
- SHA1 c12fe1002a1bb5373f11fa72477c8112e5b53be0
- SHA512 ec74c21b76df3fc85458628763e594d60466760fc2c340ecdadd7a3aa9e987c79709af1ba2eb5d13a518221379a6b0e23ee773a9a094cb444a7a10bf7f9777d1
- SSDEEP 49152:JTzm/Ot3c6WnAgm+vKrcBO0fQc0g4yqvwLhp3U5ulEG0uqHIAIKfXeARix:Fm/OdlWo+4e/0g4yUAv3UhdHIAnK
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
HEARTB.dll
Resource
win7-20231129-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
HEARTB.dll
Resource
win10v2004-20240412-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target HEARTB.dll
- Size 762.9MB
- SHA256 4c10fd9d4054a3454750bcd9a130e3d852644e821fd18396f89deefa9ab3c75a
- MD5 29655ea1367ead030a3bf40659327ca0
- SHA1 d176cc3048e0727f2b81ea027b039bbde85db3e3
- SHA512 b6e79c239097869eac20ee931171ab540f646752f498009c97a19fa4e83a96b8fbc85ae8a9bd5b49105de489ce45adada2b00620c016ae3b0ab81e60faee5144
- SSDEEP 98304:oDHQXidDnBW0hcthSDnqDO5rzRQfaxcxVtn:oui9gDmyhrn
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Rhadamanthys
Rhadamanthys is an info stealer written in C++ first seen in August 2022.
-
Suspicious use of NtCreateUserProcessOtherParentProcess
-
Suspicious use of NtCreateThreadExHideFromDebugger