Overview

overview

10

Static

static

3

Setup.exe

windows7-x64

10

Setup.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Setup.exe

  • Size

    391KB

  • Sample

    240721-t524bsxeql

  • MD5

    05d82d472cdb3c17efd8b677c15af16d

  • SHA1

    e7bac7d2002b26df5014f8887e16c699db5e712f

  • SHA256

    cc0b2f3aa1a2707263c8564df10d8b8d21bc32583b191e02de5a48043d550833

  • SHA512

    0f49584cfaa7854e15cfd512cbfcdec40c6e30c341b12ba8d9fd050945ffe217a2bfa4389345c4f451000f4e91c32362c7806ba052bbc980e60f976fa8242ac4

  • SSDEEP

    6144:2WPk5q4jmbRFVM4siBcukVYVnl9ezZCtXxkffqLDma4vmhWbo:2WP8J0krpuxqzZyXmcSpv/o

Score
10/10
rhadamanthysstealer

Malware Config

Targets

    • Target

      Setup.exe

    • Size

      391KB

    • MD5

      05d82d472cdb3c17efd8b677c15af16d

    • SHA1

      e7bac7d2002b26df5014f8887e16c699db5e712f

    • SHA256

      cc0b2f3aa1a2707263c8564df10d8b8d21bc32583b191e02de5a48043d550833

    • SHA512

      0f49584cfaa7854e15cfd512cbfcdec40c6e30c341b12ba8d9fd050945ffe217a2bfa4389345c4f451000f4e91c32362c7806ba052bbc980e60f976fa8242ac4

    • SSDEEP

      6144:2WPk5q4jmbRFVM4siBcukVYVnl9ezZCtXxkffqLDma4vmhWbo:2WP8J0krpuxqzZyXmcSpv/o

    Score
    10/10
    rhadamanthysstealer

    • Rhadamanthys

      Rhadamanthys is an info stealer written in C++ first seen in August 2022.

      stealerrhadamanthys

    • Suspicious use of NtCreateUserProcessOtherParentProcess

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks