General

  • Target

    SetLoader.exe

  • Size

    5.1MB

  • Sample

    240918-lga1yavaln

  • MD5

    53c7101148e18f8d51a0951367d685af

  • SHA1

    c402d153e5aaab6f29c5b272e38947b17c30da13

  • SHA256

    5e4c3ede27f4b698191b7d8e27c58c5e23e15acaf97fc1c18f8a94208ff8d837

  • SHA512

    e3df50a26d593d99387cfa367ac84d651198ab3a13a299484fe5354561723f8b97a1658636990bfd68785a809722c5bd14ac32917b1669204f6621a55ad3ea86

  • SSDEEP

    98304:bjlp/LZZcJZn+EDfx0Ew1SWuiBdOpNT4ggxwzwIPFiAOZBv15HWLZOVK73wuB0is:bjnenPf/sBfdOptexYnCZD52L+9EI1

Malware Config

Targets

    • Target

      SetLoader.exe

    • Size

      5.1MB

    • MD5

      53c7101148e18f8d51a0951367d685af

    • SHA1

      c402d153e5aaab6f29c5b272e38947b17c30da13

    • SHA256

      5e4c3ede27f4b698191b7d8e27c58c5e23e15acaf97fc1c18f8a94208ff8d837

    • SHA512

      e3df50a26d593d99387cfa367ac84d651198ab3a13a299484fe5354561723f8b97a1658636990bfd68785a809722c5bd14ac32917b1669204f6621a55ad3ea86

    • SSDEEP

      98304:bjlp/LZZcJZn+EDfx0Ew1SWuiBdOpNT4ggxwzwIPFiAOZBv15HWLZOVK73wuB0is:bjnenPf/sBfdOptexYnCZD52L+9EI1

    • Rhadamanthys

      Rhadamanthys is an info stealer written in C++ first seen in August 2022.

    • Suspicious use of NtCreateUserProcessOtherParentProcess

MITRE ATT&CK Enterprise v15

Tasks