Overview

overview

10

Static

static

3

705b7d92ad...36.exe

windows7-x64

10

705b7d92ad...36.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    73b68bac009dc1c078be58e020c273db7581cd0824d67741bd4796561977aff8

  • Size

    474KB

  • Sample

    240417-rceffsah82

  • MD5

    c7221032704e1b07739f9c0172997ab5

  • SHA1

    a528dc81e8eb5c9cfa90d1bd8e741a23c30e673c

  • SHA256

    73b68bac009dc1c078be58e020c273db7581cd0824d67741bd4796561977aff8

  • SHA512

    1ae56498d11d23708ef671d5fff64ae1dbdb8a93575f878ceccaa2511d23464eb980015c7ce236a1e74eded39ecfe0ff8b04933e36795e6fc9ad860cc345017f

  • SSDEEP

    12288:BVfAuUNufV+7zYVFXOs+7okCr88hgJSYH40BSSgG5aLV:BVfUYfV+/OYsKVC5hgb4MRNu

Score
10/10
rhadamanthysstealer

Malware Config

Targets

    • Target

      705b7d92ad63eff99cb0a0cac0489b958ec760f5bb6653bc27671526896cd736.exe

    • Size

      614KB

    • MD5

      e984e627863a3e0a72d0700958d387d1

    • SHA1

      dbf779f659a4b6cab0b812b40162356deaf17d8a

    • SHA256

      705b7d92ad63eff99cb0a0cac0489b958ec760f5bb6653bc27671526896cd736

    • SHA512

      0460aa0fbfefc290b1cb67e985dd45ae0e30d551f5fa2861a19fa56b773cfcb8b717c08efde8155ee4a8b130b4c98225f9f2b99e02b2345483731e6a79a7683b

    • SSDEEP

      12288:jxz53ZyQjeCVzgbuxi2ZoxWWVug+A+UaEVRAdpat:/IgeCxgCxi2ZoxkxUaHwt

    Score
    10/10
    rhadamanthysstealer

    • Rhadamanthys

      Rhadamanthys is an info stealer written in C++ first seen in August 2022.

      stealerrhadamanthys

    • Suspicious use of NtCreateUserProcessOtherParentProcess

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks