Analysis
-
max time kernel
121s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
13-09-2024 19:10
Behavioral task
behavioral1
Sample
8161fb4c042aac76e73980d52138488cbb52b0581a34ea312510e3af3413a0c9.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
8161fb4c042aac76e73980d52138488cbb52b0581a34ea312510e3af3413a0c9.exe
Resource
win10v2004-20240802-en
General
-
Target
8161fb4c042aac76e73980d52138488cbb52b0581a34ea312510e3af3413a0c9.exe
-
Size
230KB
-
MD5
a7e0c20da5405e04b80b5c6a70c21ef5
-
SHA1
ce2cecc7bef86a654ad0861255c0c829bdba0a1b
-
SHA256
8161fb4c042aac76e73980d52138488cbb52b0581a34ea312510e3af3413a0c9
-
SHA512
fc216893f5a73fd343d7896eb73a728eab82c24cb8370c0f4584555b8ce434e43a69b8e317262113d3566296031a52a3dbcf77412d4cb0624e4d29ed39978eb5
-
SSDEEP
6144:KOqDycyyVJP4E2t+3ydnJhU9vWtrvz3w:Fmyc9UE2t++h6v2/g
Malware Config
Signatures
-
Rhadamanthys
Rhadamanthys is an info stealer written in C++ first seen in August 2022.
-
Processes:
resource yara_rule behavioral1/memory/844-0-0x000000013F3F0000-0x000000013F476000-memory.dmp upx behavioral1/memory/844-2-0x000000013F3F0000-0x000000013F476000-memory.dmp upx