Overview

overview

10

Static

static

3

509e77fcd7...c6.exe

windows7-x64

10

509e77fcd7...c6.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    509e77fcd7effd3229cfdaba1c52fc413e20197e91b5af414b4c14257097b1c6.exe

  • Size

    19.8MB

  • Sample

    240914-br42nazgpe

  • MD5

    3f143cb6d87deecda2da2b1c8da5c0bd

  • SHA1

    42721ea6a7a5debcc9193bcd7230922aae68bf03

  • SHA256

    509e77fcd7effd3229cfdaba1c52fc413e20197e91b5af414b4c14257097b1c6

  • SHA512

    9e420b9de31daa227be36e818d1a607a03db71d4aabb2a2434118928773616d2a40f2847cbe0d867b3112a66939812d04e532e0a76a44ff0b01475626405b279

  • SSDEEP

    49152:KeC6HNwKTa+aUlx9RoFWKnNtONwyhg/0IizKiwNRrsOVF1ux89GVnsVOVLGt3tME:zXbJ1Rr5C

Score
10/10
rhadamanthysstealer

Malware Config

Extracted

Family

rhadamanthys

C2

https://deadmunky.nl:5403/68efc67ee981034e6b329438/wta0p00u.gc55h

Targets

    • Target

      509e77fcd7effd3229cfdaba1c52fc413e20197e91b5af414b4c14257097b1c6.exe

    • Size

      19.8MB

    • MD5

      3f143cb6d87deecda2da2b1c8da5c0bd

    • SHA1

      42721ea6a7a5debcc9193bcd7230922aae68bf03

    • SHA256

      509e77fcd7effd3229cfdaba1c52fc413e20197e91b5af414b4c14257097b1c6

    • SHA512

      9e420b9de31daa227be36e818d1a607a03db71d4aabb2a2434118928773616d2a40f2847cbe0d867b3112a66939812d04e532e0a76a44ff0b01475626405b279

    • SSDEEP

      49152:KeC6HNwKTa+aUlx9RoFWKnNtONwyhg/0IizKiwNRrsOVF1ux89GVnsVOVLGt3tME:zXbJ1Rr5C

    Score
    10/10
    rhadamanthysstealer

    • Rhadamanthys

      Rhadamanthys is an info stealer written in C++ first seen in August 2022.

      stealerrhadamanthys

    • Suspicious use of NtCreateUserProcessOtherParentProcess

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks