Overview

overview

10

Static

static

3

driver1.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    driver1.exe

  • Size

    10.8MB

  • Sample

    240720-y9jvrswglg

  • MD5

    0d96801162f9328e93406310ce13dcd8

  • SHA1

    1dd705c9eca5bf057ed1ae1d00df266b8d2ee446

  • SHA256

    36bfb2c2ee18a261428200382979de5bf383aba6a8e21e3803f206f4a04ca334

  • SHA512

    4f4235b8d3b61edf6ee5a8a9170b9f18fa9bc077896b4d54a668bea46763f322bd2fb7924292092b85bf46d69f10d7146863205e6f84e19d540149510e2d27dd

  • SSDEEP

    98304:qd9qQ34+7AhdAOHlfY88KC/EFLvcOXhHd/0h+5:qj4+7AhdHHlppFLn9

Score
10/10
rhadamanthysstealer

Malware Config

Targets

    • Target

      driver1.exe

    • Size

      10.8MB

    • MD5

      0d96801162f9328e93406310ce13dcd8

    • SHA1

      1dd705c9eca5bf057ed1ae1d00df266b8d2ee446

    • SHA256

      36bfb2c2ee18a261428200382979de5bf383aba6a8e21e3803f206f4a04ca334

    • SHA512

      4f4235b8d3b61edf6ee5a8a9170b9f18fa9bc077896b4d54a668bea46763f322bd2fb7924292092b85bf46d69f10d7146863205e6f84e19d540149510e2d27dd

    • SSDEEP

      98304:qd9qQ34+7AhdAOHlfY88KC/EFLvcOXhHd/0h+5:qj4+7AhdHHlppFLn9

    Score
    10/10
    rhadamanthysstealer

    • Rhadamanthys

      Rhadamanthys is an info stealer written in C++ first seen in August 2022.

      stealerrhadamanthys

    • Suspicious use of NtCreateUserProcessOtherParentProcess

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Matrix

Tasks