General
- Target BaconWare.exe
- Size 355KB
- Sample240430-ws2cdaed76
- SHA256 593c5558cb8b7ee23720b06604ddf701b9239976fe02eaa3652bbcdf5d2ea346
- MD5 c1e0eb74024ad09c5f3750e58de67199
- SHA1 61b531ad13a86c7580d2a4de36589b3deeb7be3b
- SHA512 5d74eba5ed7e1452555faae90d8ee449890d9baf26fc67b7d12fbafeebc0f06c233646aaad56f266958d8654eadb471817e7d789db5433ec8481c5b85dffbcdd
- SSDEEP 6144:g2qezd2ab1/RuHk+M3k8M3W7XomjOJCqshrOlumY6DMIewgxQfqLsb:gf2R/EEkCQFYDwRqQ
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
BaconWare.exe
Resource
win7-20240221-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
BaconWare.exe
Resource
win10v2004-20240419-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target BaconWare.exe
- Size 355KB
- SHA256 593c5558cb8b7ee23720b06604ddf701b9239976fe02eaa3652bbcdf5d2ea346
- MD5 c1e0eb74024ad09c5f3750e58de67199
- SHA1 61b531ad13a86c7580d2a4de36589b3deeb7be3b
- SHA512 5d74eba5ed7e1452555faae90d8ee449890d9baf26fc67b7d12fbafeebc0f06c233646aaad56f266958d8654eadb471817e7d789db5433ec8481c5b85dffbcdd
- SSDEEP 6144:g2qezd2ab1/RuHk+M3k8M3W7XomjOJCqshrOlumY6DMIewgxQfqLsb:gf2R/EEkCQFYDwRqQ
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Rhadamanthys
Rhadamanthys is an info stealer written in C++ first seen in August 2022.
-
Suspicious use of NtCreateUserProcessOtherParentProcess