General
- Target nitro.exe
- Size 448KB
- Sample240809-tplfmswfqh
- SHA256 fb60104722bd3e978deb9f646a66c645669b56976f3860422151936945104b0d
- MD5 247e118fea545a3c2fe66e2f6cbb909e
- SHA1 9b3111d641b4d298c1929bb854fe625dce04a31e
- SHA512 339d33716e0906b40ec99e959f364681af828d9e4c6756955ca20d4bd309ce534e77593d9e662fbf15b848f480dcd6ca73d94407499b067e1984d0070af96078
- SSDEEP 6144:5YD/SKiChZJwLEm/8hXOrPM90O0UkoGBnjCdbGeFhhYftgpN9J2Gox6KX2WIUvg3:iD/x91wiGM9YNnGFn/ym9md27XSgBaQ
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
nitro.exe
Resource
win10v2004-20240802-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target nitro.exe
- Size 448KB
- SHA256 fb60104722bd3e978deb9f646a66c645669b56976f3860422151936945104b0d
- MD5 247e118fea545a3c2fe66e2f6cbb909e
- SHA1 9b3111d641b4d298c1929bb854fe625dce04a31e
- SHA512 339d33716e0906b40ec99e959f364681af828d9e4c6756955ca20d4bd309ce534e77593d9e662fbf15b848f480dcd6ca73d94407499b067e1984d0070af96078
- SSDEEP 6144:5YD/SKiChZJwLEm/8hXOrPM90O0UkoGBnjCdbGeFhhYftgpN9J2Gox6KX2WIUvg3:iD/x91wiGM9YNnGFn/ym9md27XSgBaQ
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Rhadamanthys
Rhadamanthys is an info stealer written in C++ first seen in August 2022.
-
Suspicious use of NtCreateUserProcessOtherParentProcess
-
Suspicious use of SetThreadContext