General

  • Target

    20653d4b1d392548b5dc636d76ddf39adf31a743ae3282a2f45b8e1dc12fb802N

  • Size

    704KB

  • Sample

    240930-bgjb7stfjh

  • MD5

    49bae9e069b7f7d515b9dc7c6c4953e0

  • SHA1

    9f0fd6bda7ea272a20a58a3b963ededefc87a1c9

  • SHA256

    20653d4b1d392548b5dc636d76ddf39adf31a743ae3282a2f45b8e1dc12fb802

  • SHA512

    abed4e987626f88ffa34368e94707c99c07485eb57c4e0f9f60a0f9cab843e1c62f04e8aeac1b8f069d75b90a026b5aa4a0fcd9d22efeca0f9c122d68b6f5f78

  • SSDEEP

    12288:5/y4KSeV15SORzbBTInjAD2i2/eFFi3VSS2gf0nhpYRSa18FqxbA7Ndh1UddhYUq:5/K5S0binGi/UFilSnAZv1bEJfKdTYv

Score
10/10

Malware Config

Targets

    • Target

      20653d4b1d392548b5dc636d76ddf39adf31a743ae3282a2f45b8e1dc12fb802N

    • Size

      704KB

    • MD5

      49bae9e069b7f7d515b9dc7c6c4953e0

    • SHA1

      9f0fd6bda7ea272a20a58a3b963ededefc87a1c9

    • SHA256

      20653d4b1d392548b5dc636d76ddf39adf31a743ae3282a2f45b8e1dc12fb802

    • SHA512

      abed4e987626f88ffa34368e94707c99c07485eb57c4e0f9f60a0f9cab843e1c62f04e8aeac1b8f069d75b90a026b5aa4a0fcd9d22efeca0f9c122d68b6f5f78

    • SSDEEP

      12288:5/y4KSeV15SORzbBTInjAD2i2/eFFi3VSS2gf0nhpYRSa18FqxbA7Ndh1UddhYUq:5/K5S0binGi/UFilSnAZv1bEJfKdTYv

    Score
    10/10
    • Rhadamanthys

      Rhadamanthys is an info stealer written in C++ first seen in August 2022.

    • Suspicious use of NtCreateUserProcessOtherParentProcess

MITRE ATT&CK Matrix

Tasks