Overview

overview

10

Static

static

3

1.bin.exe

windows7-x64

1

1.bin.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1.bin.exe

  • Size

    16.4MB

  • Sample

    240804-nsawesydkg

  • MD5

    d2380577442b3055fd0d4b2be4e4259f

  • SHA1

    d778af872b91fdde771ebe2256ed198eb4bf17ac

  • SHA256

    1d10f02be531cac852c559a9fcf4c5b09866e793c3ea6b3b43bce7d850ed198f

  • SHA512

    4a8d836bab6f91244c40334de9042ea060eb268d72d63694d21c5ca8e16476b69e8310922f242e4879e5388d8823aa0c95ead767be281823e37864fa0d3b38ab

  • SSDEEP

    98304:05oxEumHAeIFxfCUnzuTeTUla91+2WjEV5xJlAKgy0by/HtHH3g:7xEc7zuTeTUlaD+gXxJUt

Score
10/10
rhadamanthysdiscoverystealer

Malware Config

Targets

    • Target

      1.bin.exe

    • Size

      16.4MB

    • MD5

      d2380577442b3055fd0d4b2be4e4259f

    • SHA1

      d778af872b91fdde771ebe2256ed198eb4bf17ac

    • SHA256

      1d10f02be531cac852c559a9fcf4c5b09866e793c3ea6b3b43bce7d850ed198f

    • SHA512

      4a8d836bab6f91244c40334de9042ea060eb268d72d63694d21c5ca8e16476b69e8310922f242e4879e5388d8823aa0c95ead767be281823e37864fa0d3b38ab

    • SSDEEP

      98304:05oxEumHAeIFxfCUnzuTeTUla91+2WjEV5xJlAKgy0by/HtHH3g:7xEc7zuTeTUlaD+gXxJUt

    Score
    10/10
    rhadamanthysdiscoverystealer

    • Rhadamanthys

      Rhadamanthys is an info stealer written in C++ first seen in August 2022.

      stealerrhadamanthys

    • Suspicious use of NtCreateUserProcessOtherParentProcess

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks