General
-
Target
Portable.exe
-
Size
47.5MB
-
Sample
240831-zz242awalg
-
MD5
7914276bc13829ece91fb33f038a2344
-
SHA1
e849ac762ff282d46966ba651bb1a50b570dac43
-
SHA256
7c4e153855d42e10e3635b40f6471246624a3492a4c07170443a7fa9131eac33
-
SHA512
184a6831dd66c7fe4444c5515dd702bab3cf3743fec7d2953f3f5d5387f18a5a3915290013500d74076d61b45817dc5c9b806598e13971c5f71596c5a8496002
-
SSDEEP
786432:uCDyg3W4TaEhG4fsl6ny34lzK/szLPlwXu4Sk/f9VJxVNeKtmUVQ8E+5M5+bwMzk:uCWcaEhG4fsEnyIE/2LqXOk/f9VdIEm/
Static task
static1
Behavioral task
behavioral1
Sample
Portable.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
Portable.exe
Resource
win10v2004-20240802-en
Malware Config
Extracted
rhadamanthys
https://185.161.251.6:5545/03a8d04906e4d03e0d308acd/homicide
Targets
-
-
Target
Portable.exe
-
Size
47.5MB
-
MD5
7914276bc13829ece91fb33f038a2344
-
SHA1
e849ac762ff282d46966ba651bb1a50b570dac43
-
SHA256
7c4e153855d42e10e3635b40f6471246624a3492a4c07170443a7fa9131eac33
-
SHA512
184a6831dd66c7fe4444c5515dd702bab3cf3743fec7d2953f3f5d5387f18a5a3915290013500d74076d61b45817dc5c9b806598e13971c5f71596c5a8496002
-
SSDEEP
786432:uCDyg3W4TaEhG4fsl6ny34lzK/szLPlwXu4Sk/f9VJxVNeKtmUVQ8E+5M5+bwMzk:uCWcaEhG4fsEnyIE/2LqXOk/f9VdIEm/
Score10/10-
Rhadamanthys
Rhadamanthys is an info stealer written in C++ first seen in August 2022.
-
Suspicious use of NtCreateUserProcessOtherParentProcess
-