General

  • Target

    mygame.exe

  • Size

    3.6MB

  • Sample

    240724-tp24dsxhmh

  • MD5

    028dbbbb746e77089c6fe2fbc6481d1a

  • SHA1

    7af2e30544aa0d5b1bd13ec7d029ea9d36c1e58f

  • SHA256

    f95a2befc17647b2f2bbc3e6ada0d57b75d9b04b9476b11294000dfd0787b246

  • SHA512

    0cba1356b712961d5b450e1f9911737fd34bb8d858a87f3ef8585f3233218205bbc25214fdb6e907c2a5d3cfc195771594030ef46e4b3a5aedc7e364ddb31aac

  • SSDEEP

    49152:Hn1EriyQCuAlu0z97kwUUaX6Hf9mTgs/a8P1hTIpTAWS/ksd2AF9Z0SbVwKuhS:VEpewUnX6Vj89h0Sbr

Malware Config

Targets

    • Target

      mygame.exe

    • Size

      3.6MB

    • MD5

      028dbbbb746e77089c6fe2fbc6481d1a

    • SHA1

      7af2e30544aa0d5b1bd13ec7d029ea9d36c1e58f

    • SHA256

      f95a2befc17647b2f2bbc3e6ada0d57b75d9b04b9476b11294000dfd0787b246

    • SHA512

      0cba1356b712961d5b450e1f9911737fd34bb8d858a87f3ef8585f3233218205bbc25214fdb6e907c2a5d3cfc195771594030ef46e4b3a5aedc7e364ddb31aac

    • SSDEEP

      49152:Hn1EriyQCuAlu0z97kwUUaX6Hf9mTgs/a8P1hTIpTAWS/ksd2AF9Z0SbVwKuhS:VEpewUnX6Vj89h0Sbr

    • Rhadamanthys

      Rhadamanthys is an info stealer written in C++ first seen in August 2022.

    • Suspicious use of NtCreateUserProcessOtherParentProcess

MITRE ATT&CK Enterprise v15

Tasks