Analysis
-
max time kernel
147s -
max time network
151s -
platform
windows11-21h2_x64 -
resource
win11-20240802-en -
resource tags
arch:x64arch:x86image:win11-20240802-enlocale:en-usos:windows11-21h2-x64system -
submitted
05-09-2024 17:38
Static task
static1
Behavioral task
behavioral1
Sample
6601ee1a076421934f9638172ff98fb0e88192c45ed80c2c7235880ad46329fb.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral2
Sample
6601ee1a076421934f9638172ff98fb0e88192c45ed80c2c7235880ad46329fb.exe
Resource
win11-20240802-en
General
-
Target
6601ee1a076421934f9638172ff98fb0e88192c45ed80c2c7235880ad46329fb.exe
-
Size
14.7MB
-
MD5
40783b166986a35df82071f99a6f2fe3
-
SHA1
54b46051cd1e9db4c87672f03b32a00efe80d6b9
-
SHA256
6601ee1a076421934f9638172ff98fb0e88192c45ed80c2c7235880ad46329fb
-
SHA512
5714c76e30bc7e1ff9895106c85cd6e991c221f11a68c324d884f3eae2112f87f97b1f3b55557984432b0206d14230a3553d71a93cbd39ddcba92a7ab80203af
-
SSDEEP
393216:EsCtwlGMhihtYziCgLcj4T2xiCYW7RET68Os:EGpBfbYE6rOs
Malware Config
Signatures
-
Rhadamanthys
Rhadamanthys is an info stealer written in C++ first seen in August 2022.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes:
6601ee1a076421934f9638172ff98fb0e88192c45ed80c2c7235880ad46329fb.exedescription ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 6601ee1a076421934f9638172ff98fb0e88192c45ed80c2c7235880ad46329fb.exe