General
-
Target
exe_unpacked
-
Size
355KB
-
Sample
240923-k5827stcln
-
MD5
5f54a6ca1c53aa63bd083c3a5e24569b
-
SHA1
7b0e3f1b7572569a0f5473cc3bbdbe0122a9616c
-
SHA256
cc8b0af0cd9c2a09c33e266729d526f64e147901710140596942726c68ca820f
-
SHA512
80c97da20b7ff87460973a2dac8ab8b4d44fea1c26f81ad48936bfdb72c30a0c6174154aff1533ad4d2d806d7adcd06d164bea67ffdeb0c39978131841efe39b
-
SSDEEP
6144:g2qezd2ab1/RuHk+M3k8M3W7XomjOJCqshrOlumY6DMIewgxQfqJsb:gf2R/EEkCQFYDwRq+
Behavioral task
behavioral1
Sample
exe_unpacked.exe
Resource
win10-20240404-en
Malware Config
Extracted
rhadamanthys
https://deadmunky.nl:5403/68efc67ee981034e6b329438/h7bgh43h.758up
Targets
-
-
Target
exe_unpacked
-
Size
355KB
-
MD5
5f54a6ca1c53aa63bd083c3a5e24569b
-
SHA1
7b0e3f1b7572569a0f5473cc3bbdbe0122a9616c
-
SHA256
cc8b0af0cd9c2a09c33e266729d526f64e147901710140596942726c68ca820f
-
SHA512
80c97da20b7ff87460973a2dac8ab8b4d44fea1c26f81ad48936bfdb72c30a0c6174154aff1533ad4d2d806d7adcd06d164bea67ffdeb0c39978131841efe39b
-
SSDEEP
6144:g2qezd2ab1/RuHk+M3k8M3W7XomjOJCqshrOlumY6DMIewgxQfqJsb:gf2R/EEkCQFYDwRq+
Score10/10-
Rhadamanthys
Rhadamanthys is an info stealer written in C++ first seen in August 2022.
-
Suspicious use of NtCreateUserProcessOtherParentProcess
-