a14fa40b174aa50e6ca01dcf32a346c1eae8737eb6ed93a558cdeb601b86986b | Triage™

Login
Reports

Overview

overview

Static

static

3

Additional...32.dll

windows10-2004-x64

3

Additional...64.dll

windows10-2004-x64

1

Additional...rs.dll

windows10-2004-x64

1

Additional...64.dll

windows10-2004-x64

4

DLL/D3Dcom...47.dll

windows10-2004-x64

3

DLL/Qt5Core.dll

windows10-2004-x64

3

DLL/Qt5Gui.dll

windows10-2004-x64

1

DLL/Qt5Network.dll

windows10-2004-x64

3

DLL/Qt5Qml.dll

windows10-2004-x64

3

DLL/Qt5Quick.dll

windows10-2004-x64

1

DLL/Qt5Widgets.dll

windows10-2004-x64

3

DLL/browser.dll

windows10-2004-x64

3

DLL/libGLESV2.dll

windows10-2004-x64

1

DLL/libcrypto-1_1.dll

windows10-2004-x64

3

DLL/opengl32sw.dll

windows10-2004-x64

1

DLL/ucrtbase.dll

windows10-2004-x64

1

FileInstaller.exe

windows10-2004-x64

Resubmissions

09/06/2024, 10:21

240609-md1b4aaa4810

09/06/2024, 10:21

240609-mdsx1saa46

09/06/2024, 10:08

240609-l6f89ahh463

Analysis

max time kernel
123s
max time network
127s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
09/06/2024, 10:21

Sharing

Copy URL Twitter E-mail

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

Additional/CiWinCng32.dll

Resource

win10v2004-20240226-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral2

Sample

Additional/CiWinCng64.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

Additional/bdfilters.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral4

Sample

Additional/bdfilters64.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral5

Sample

DLL/D3Dcompiler_47.dll

Resource

win10v2004-20240426-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral6

Sample

DLL/Qt5Core.dll

Resource

win10v2004-20240426-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral7

Sample

DLL/Qt5Gui.dll

Resource

win10v2004-20240426-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral8

Sample

DLL/Qt5Network.dll

Resource

win10v2004-20240426-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral9

Sample

DLL/Qt5Qml.dll

Resource

win10v2004-20240426-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral10

Sample

DLL/Qt5Quick.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral11

Sample

DLL/Qt5Widgets.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral12

Sample

DLL/browser.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral13

Sample

DLL/libGLESV2.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral14

Sample

DLL/libcrypto-1_1.dll

Resource

win10v2004-20240426-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral15

Sample

DLL/opengl32sw.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral16

Sample

DLL/ucrtbase.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral17

Sample

FileInstaller.exe

Resource

win10v2004-20240426-en

windows10-2004-x64

6 signatures

150 seconds

rhadamanthys stealer

Report Analysis Logs

General

Target
Additional/CiWinCng64.dll
Size 3.3MB
Sample240609-md1b4aaa48
SHA256 c1596b987462edfcae5895d7dae2552e4cc737a2419da46c2e6911cc91b41c08
MD5 cc9393adf63e1d1cb7ab6deb7fd73e1c
SHA1 1f8386a6171fbf0f7721daf737bc812225da7800
SHA512 04ac90229fc7e753054725bbdd78681415b39c146d65f50e656938c2c5a56420bf9ad8c384d482f5066d94932e1c4a745faa8fb506e6a43a088772dc91572631
SSDEEP 49152:zfIU6iPVwASO8GtlqaHIPxy/iME+8fRFnuq2bG9G5XozWGmVXUK50TC6Zm+qbZKu:8+FPisw0VXUE0TLDv0zojYZ
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\Additional\CiWinCng64.dll,#1
1⤵
PID:876

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --field-trial-handle=4356,i,4686244434963378549,11462511444150484980,262144 --variations-seed-version --mojo-platform-channel-handle=1040 /prefetch:8
1⤵
PID:3468

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

© 2018-2026

Terms | Privacy