General
- Target SetLoader.exe
- Size 35.9MB
- Sample240914-tkb2easdlr
- SHA256 054364f58a17ec336ad19906082bb054b565f38de455d89f51ed02e290c75a72
- MD5 eb142f56ed73c4cce280fc3f3493429a
- SHA1 e1ce2464864482703abded9cbed4aaabc638a113
- SHA512 75c97a01fe3963939233214093c419fdc3fc561e35e8884ee221e4dced3bab1baa9c4ed2fec6a95517de794728df1eef0e533357b16b719480aa7692910779c2
- SSDEEP 393216:f1Du8BtuBw2FEL3Z3aLUoQvo6LP/SgbSpYvKEh1EdKwlGQKPJuGsiTfREsrgCYfd:fMguj8Q4VfvPqFTrYC
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
SetLoader.exe
Resource
win7-20240903-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
SetLoader.exe
Resource
win10v2004-20240802-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target SetLoader.exe
- Size 35.9MB
- SHA256 054364f58a17ec336ad19906082bb054b565f38de455d89f51ed02e290c75a72
- MD5 eb142f56ed73c4cce280fc3f3493429a
- SHA1 e1ce2464864482703abded9cbed4aaabc638a113
- SHA512 75c97a01fe3963939233214093c419fdc3fc561e35e8884ee221e4dced3bab1baa9c4ed2fec6a95517de794728df1eef0e533357b16b719480aa7692910779c2
- SSDEEP 393216:f1Du8BtuBw2FEL3Z3aLUoQvo6LP/SgbSpYvKEh1EdKwlGQKPJuGsiTfREsrgCYfd:fMguj8Q4VfvPqFTrYC
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Rhadamanthys
Rhadamanthys is an info stealer written in C++ first seen in August 2022.
-
Suspicious use of NtCreateUserProcessOtherParentProcess
-
Executes dropped EXE