Overview

overview

10

Static

static

3

de3fd1673c...4b.exe

windows7-x64

7

de3fd1673c...4b.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    de3fd1673c2ad1ab4b44ee5434a70240ae43722b82a86add6cac1bc22414a34b

  • Size

    7.1MB

  • Sample

    240728-zj9tyaxgqe

  • MD5

    945799bf0c3ea84b4fbe73c02ebe45d3

  • SHA1

    4aaba52d3cb179d390d427576b02b9f8fca038ef

  • SHA256

    de3fd1673c2ad1ab4b44ee5434a70240ae43722b82a86add6cac1bc22414a34b

  • SHA512

    ec6ecfc7fa46ac82680b8b5bf67581f8f0578e202b22909af15efc2d1b94eec2c43a630413b94f7e1c47c3848d2512750b2abd417d48e24cf6442dfb1c17b4dd

  • SSDEEP

    196608:cfU9Zc6BLCAuwqj4FGUY7R7dd5HTK32N5mh:sGhC3+FGUY1J3Pmh

Score
10/10
rhadamanthysdiscoverystealer

Malware Config

Targets

    • Target

      de3fd1673c2ad1ab4b44ee5434a70240ae43722b82a86add6cac1bc22414a34b

    • Size

      7.1MB

    • MD5

      945799bf0c3ea84b4fbe73c02ebe45d3

    • SHA1

      4aaba52d3cb179d390d427576b02b9f8fca038ef

    • SHA256

      de3fd1673c2ad1ab4b44ee5434a70240ae43722b82a86add6cac1bc22414a34b

    • SHA512

      ec6ecfc7fa46ac82680b8b5bf67581f8f0578e202b22909af15efc2d1b94eec2c43a630413b94f7e1c47c3848d2512750b2abd417d48e24cf6442dfb1c17b4dd

    • SSDEEP

      196608:cfU9Zc6BLCAuwqj4FGUY7R7dd5HTK32N5mh:sGhC3+FGUY1J3Pmh

    Score
    10/10
    discoveryrhadamanthysstealer

    • Rhadamanthys

      Rhadamanthys is an info stealer written in C++ first seen in August 2022.

      stealerrhadamanthys

    • Suspicious use of NtCreateUserProcessOtherParentProcess

    • Executes dropped EXE

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks