Resubmissions

20-08-2024 14:34

240820-rxvcea1enr 10

08-08-2024 18:14

240808-wvb59sxaqk 10

General

  • Target

    5b2c5bd17a50bf0ffcc6b80277274ec4b6373aef889e22b896738df9b08d687f(1)

  • Size

    438KB

  • Sample

    240808-wvb59sxaqk

  • MD5

    f400057763476649ca620a1fa7792c22

  • SHA1

    f8e4f976cc28fcd8e91cf1dc48cb503642cd7ded

  • SHA256

    5b2c5bd17a50bf0ffcc6b80277274ec4b6373aef889e22b896738df9b08d687f

  • SHA512

    3efc264b36c50d30a98fae7adb7acd1ef4b79314e1d708a67d8535bb3d5ffcd0838765b92fd9789e2436d0d75ea69672eee2f5fa55b7d6c9577491b775ab9e3d

  • SSDEEP

    12288:6uZZani4FaYkizhRpfX54K+uiE8BZzhzJ:6+ZIi4Z95/54K+uiE87d

Score
10/10

Malware Config

Targets

    • Target

      5b2c5bd17a50bf0ffcc6b80277274ec4b6373aef889e22b896738df9b08d687f(1)

    • Size

      438KB

    • MD5

      f400057763476649ca620a1fa7792c22

    • SHA1

      f8e4f976cc28fcd8e91cf1dc48cb503642cd7ded

    • SHA256

      5b2c5bd17a50bf0ffcc6b80277274ec4b6373aef889e22b896738df9b08d687f

    • SHA512

      3efc264b36c50d30a98fae7adb7acd1ef4b79314e1d708a67d8535bb3d5ffcd0838765b92fd9789e2436d0d75ea69672eee2f5fa55b7d6c9577491b775ab9e3d

    • SSDEEP

      12288:6uZZani4FaYkizhRpfX54K+uiE8BZzhzJ:6+ZIi4Z95/54K+uiE87d

    Score
    10/10
    • Rhadamanthys

      Rhadamanthys is an info stealer written in C++ first seen in August 2022.

    • Suspicious use of NtCreateUserProcessOtherParentProcess

MITRE ATT&CK Matrix

Tasks