General
- Target Portable.exe
- Size 47.5MB
- Sample240831-zz242awalg
- SHA256 7c4e153855d42e10e3635b40f6471246624a3492a4c07170443a7fa9131eac33
- MD5 7914276bc13829ece91fb33f038a2344
- SHA1 e849ac762ff282d46966ba651bb1a50b570dac43
- SHA512 184a6831dd66c7fe4444c5515dd702bab3cf3743fec7d2953f3f5d5387f18a5a3915290013500d74076d61b45817dc5c9b806598e13971c5f71596c5a8496002
- SSDEEP 786432:uCDyg3W4TaEhG4fsl6ny34lzK/szLPlwXu4Sk/f9VJxVNeKtmUVQ8E+5M5+bwMzk:uCWcaEhG4fsEnyIE/2LqXOk/f9VdIEm/
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Portable.exe
Resource
win7-20240708-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
Portable.exe
Resource
win10v2004-20240802-en
6 signatures
150 seconds
Malware Config
Extracted
Family
-
rhadamanthys
C2
-
https://185.161.251.6:5545/03a8d04906e4d03e0d308acd/homicide
Targets
-
- Target Portable.exe
- Size 47.5MB
- SHA256 7c4e153855d42e10e3635b40f6471246624a3492a4c07170443a7fa9131eac33
- MD5 7914276bc13829ece91fb33f038a2344
- SHA1 e849ac762ff282d46966ba651bb1a50b570dac43
- SHA512 184a6831dd66c7fe4444c5515dd702bab3cf3743fec7d2953f3f5d5387f18a5a3915290013500d74076d61b45817dc5c9b806598e13971c5f71596c5a8496002
- SSDEEP 786432:uCDyg3W4TaEhG4fsl6ny34lzK/szLPlwXu4Sk/f9VJxVNeKtmUVQ8E+5M5+bwMzk:uCWcaEhG4fsEnyIE/2LqXOk/f9VdIEm/
- MD5 SHA1 SHA512 SSDEEP
Score10/10Rhadamanthys
Rhadamanthys is an info stealer written in C++ first seen in August 2022.
Suspicious use of NtCreateUserProcessOtherParentProcess