Resubmissions

09/08/2024, 16:13

240809-tplfmswfqh10

09/08/2024, 16:08

240809-tla6hawfna10

General

  • Target
    nitro.exe
  • Size 448KB
  • Sample240809-tplfmswfqh
  • SHA256 fb60104722bd3e978deb9f646a66c645669b56976f3860422151936945104b0d
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Targets

    • Target
      nitro.exe
    • Size 448KB
    • SHA256 fb60104722bd3e978deb9f646a66c645669b56976f3860422151936945104b0d
    • MD5 SHA1 SHA512 SSDEEP
    • Rhadamanthys

      Rhadamanthys is an info stealer written in C++ first seen in August 2022.

    • Suspicious use of NtCreateUserProcessOtherParentProcess

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks