Analysis
-
max time kernel
140s -
max time network
123s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
14-08-2024 10:23
Behavioral task
behavioral1
Sample
2024-08-14_b0a677e363c108719612b8ef2cd1429e_mafia_rhadamanthys.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2024-08-14_b0a677e363c108719612b8ef2cd1429e_mafia_rhadamanthys.exe
Resource
win10v2004-20240802-en
General
-
Target
2024-08-14_b0a677e363c108719612b8ef2cd1429e_mafia_rhadamanthys.exe
-
Size
563KB
-
MD5
b0a677e363c108719612b8ef2cd1429e
-
SHA1
74f5f77c95ff7a12ebc74e4b314491851b2c022d
-
SHA256
ffb7a06dc8e02634f576d1898498c075750bb06ff7a3395cff3d41ba677624e9
-
SHA512
30ed07ff6c5109967a0e24c6e4f37500562251c432bf76bd496e5ab2dc0d0c9600b08cf8b04fcd14e3026b1026f3a69d160d6a4a129fee474ac57384f73b4baf
-
SSDEEP
12288:Y3To56ljo+iUKM+n0fB+3lXqrmC1VFng60OCHNMNKf:eo+FKM+n0f0lXgm4VV6SKf
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes:
2024-08-14_b0a677e363c108719612b8ef2cd1429e_mafia_rhadamanthys.exedescription ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2024-08-14_b0a677e363c108719612b8ef2cd1429e_mafia_rhadamanthys.exe