Overview

overview

10

Static

static

3

nitro.exe

windows7-x64

10

nitro.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    nitro.exe

  • Size

    448KB

  • Sample

    240809-wmeanaxdke

  • MD5

    247e118fea545a3c2fe66e2f6cbb909e

  • SHA1

    9b3111d641b4d298c1929bb854fe625dce04a31e

  • SHA256

    fb60104722bd3e978deb9f646a66c645669b56976f3860422151936945104b0d

  • SHA512

    339d33716e0906b40ec99e959f364681af828d9e4c6756955ca20d4bd309ce534e77593d9e662fbf15b848f480dcd6ca73d94407499b067e1984d0070af96078

  • SSDEEP

    6144:5YD/SKiChZJwLEm/8hXOrPM90O0UkoGBnjCdbGeFhhYftgpN9J2Gox6KX2WIUvg3:iD/x91wiGM9YNnGFn/ym9md27XSgBaQ

Score
10/10
rhadamanthysdiscoverystealer

Malware Config

Targets

    • Target

      nitro.exe

    • Size

      448KB

    • MD5

      247e118fea545a3c2fe66e2f6cbb909e

    • SHA1

      9b3111d641b4d298c1929bb854fe625dce04a31e

    • SHA256

      fb60104722bd3e978deb9f646a66c645669b56976f3860422151936945104b0d

    • SHA512

      339d33716e0906b40ec99e959f364681af828d9e4c6756955ca20d4bd309ce534e77593d9e662fbf15b848f480dcd6ca73d94407499b067e1984d0070af96078

    • SSDEEP

      6144:5YD/SKiChZJwLEm/8hXOrPM90O0UkoGBnjCdbGeFhhYftgpN9J2Gox6KX2WIUvg3:iD/x91wiGM9YNnGFn/ym9md27XSgBaQ

    Score
    10/10
    rhadamanthysdiscoverystealer

    • Rhadamanthys

      Rhadamanthys is an info stealer written in C++ first seen in August 2022.

      stealerrhadamanthys

    • Suspicious use of NtCreateUserProcessOtherParentProcess

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks