General
-
Target
c6f78c3a4bd9ddc918702468f97cf894fe54dafcb6b082820784265b21a83852
-
Size
433KB
-
Sample
240904-139tqaxdnr
-
MD5
fe4513b354aeb41ccf528545a6d202d7
-
SHA1
f481c697b2b82d2d47b54b579c73ff0c6375b0db
-
SHA256
c6f78c3a4bd9ddc918702468f97cf894fe54dafcb6b082820784265b21a83852
-
SHA512
1ef0a0f33a84f04a87a3f4a5a3f97a7bfe436c34be35bcc39ebd9e88a421efb66682ef7338a5e581787735567c720a64863a78490c6c6608e1d4d18317795536
-
SSDEEP
12288:1kcsgNKBMAeaEV/XhCWGPhJGgYxeE8DHYO1pT:1vsgNKBMy8/sWxedD91p
Static task
static1
Behavioral task
behavioral1
Sample
c6f78c3a4bd9ddc918702468f97cf894fe54dafcb6b082820784265b21a83852.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
c6f78c3a4bd9ddc918702468f97cf894fe54dafcb6b082820784265b21a83852.exe
Resource
win10v2004-20240802-en
Malware Config
Extracted
rhadamanthys
https://144.76.133.166:8034/5502b8a765a7d7349/ln5f9d9o.td86b
Targets
-
-
Target
c6f78c3a4bd9ddc918702468f97cf894fe54dafcb6b082820784265b21a83852
-
Size
433KB
-
MD5
fe4513b354aeb41ccf528545a6d202d7
-
SHA1
f481c697b2b82d2d47b54b579c73ff0c6375b0db
-
SHA256
c6f78c3a4bd9ddc918702468f97cf894fe54dafcb6b082820784265b21a83852
-
SHA512
1ef0a0f33a84f04a87a3f4a5a3f97a7bfe436c34be35bcc39ebd9e88a421efb66682ef7338a5e581787735567c720a64863a78490c6c6608e1d4d18317795536
-
SSDEEP
12288:1kcsgNKBMAeaEV/XhCWGPhJGgYxeE8DHYO1pT:1vsgNKBMy8/sWxedD91p
Score10/10-
Rhadamanthys
Rhadamanthys is an info stealer written in C++ first seen in August 2022.
-
Enumerates processes with tasklist
-
Suspicious use of SetThreadContext
-