General
- Target maisakura.exexx
- Size 364KB
- Sample240524-a341csfa7y
- SHA256 8fdf1b2809850293e4b76744a01e9497a4fa3cc0cadbda7c566d718762340c03
- MD5 dbb5c74b58a777a498e4f7deab277cab
- SHA1 f9c2fb7398c1cc1c18c7c49ffd75955a147f521a
- SHA512 65da8e67e410d830fb1be3084bc69d0ed1acc87d4e86ecf01fe8ac1068ae2502bc29afbfc64abb3e16aa82506e136ea8fd01b892e73e27815b04bf353741318e
- SSDEEP 6144:ez1B7wGwf/QyKk32TRepzysEA4eNgZLS1BdkWYrnzmOLkfzxEZwC:m1cRAiO+aLS1Bven7LCzxEG
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
maisakura.exe
Resource
win7-20240221-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
maisakura.exe
Resource
win10v2004-20240508-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target maisakura.exexx
- Size 364KB
- SHA256 8fdf1b2809850293e4b76744a01e9497a4fa3cc0cadbda7c566d718762340c03
- MD5 dbb5c74b58a777a498e4f7deab277cab
- SHA1 f9c2fb7398c1cc1c18c7c49ffd75955a147f521a
- SHA512 65da8e67e410d830fb1be3084bc69d0ed1acc87d4e86ecf01fe8ac1068ae2502bc29afbfc64abb3e16aa82506e136ea8fd01b892e73e27815b04bf353741318e
- SSDEEP 6144:ez1B7wGwf/QyKk32TRepzysEA4eNgZLS1BdkWYrnzmOLkfzxEZwC:m1cRAiO+aLS1Bven7LCzxEG
- MD5 SHA1 SHA512 SSDEEP
Score10/10Rhadamanthys
Rhadamanthys is an info stealer written in C++ first seen in August 2022.
Suspicious use of NtCreateUserProcessOtherParentProcess
Suspicious use of SetThreadContext