Overview

overview

10

Static

static

3

d3d11.dll

windows7-x64

3

d3d11.dll

windows10-2004-x64

3

s-etup.exe

windows7-x64

10

s-etup.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1390254e815bcf8b165746e61b75c33a67be98a927def1c0dcd9af10da66d9fc.zip

  • Size

    3.0MB

  • Sample

    241011-bgl34ascmj

  • MD5

    df260f1223832132ba7703c4d83fb5a7

  • SHA1

    76589851f57e29c645669b7db1de810ff3b1cab3

  • SHA256

    1390254e815bcf8b165746e61b75c33a67be98a927def1c0dcd9af10da66d9fc

  • SHA512

    1c56fd67a71f61d41a56cabaa337e91e7ac52d9ef64acddfaed86a674897731460e9e4ae42807bec82051a53d18f776b2d63f8b911cb98b6a13854acd95ac7c1

  • SSDEEP

    49152:+0Df17SYa2APxBpcuZpfDyQ/iF8R3QinAhbX2VrwDf6zN:7Dd7SCAPXpcuZV/iF8R3znAhbXgAf2N

Score
10/10
rhadamanthysdiscoverystealer

Malware Config

Targets

    • Target

      d3d11.dll

    • Size

      760.0MB

    • MD5

      4c73b7d9eb09095899cdff6785d4f8a4

    • SHA1

      2a9a608bf6b005d655e3e3e19baab52928bb2795

    • SHA256

      d7281141c92ebbaa12bfee27006325950be3121fede3d74fb68540b2babf402b

    • SHA512

      ffbd5fc43d9c44c238d95f384071519596d0a0e8a35b66dded2baed25433fc30118bb2f6d4830116140c6dd483941478e3c9b4df35207051a1132ea3d65ded41

    • SSDEEP

      196608:VnAO4YLd6cBToqh+/plnAO4YLd6cBToqh+/p:tAO46d6cBToqk/rAO46d6cBToqk/

    Score
    3/10
    discovery
    behavioral1behavioral2

    • Target

      s-etup.exe

    • Size

      678KB

    • MD5

      fd57b4457b9c453bf563559c53b9071b

    • SHA1

      08eb3a76af5c337b73f50efe5a27c43b68edce88

    • SHA256

      995bf2a06730050f99f6e5ff53d641e1e98f022e7d7c376d91d65959aa79a70e

    • SHA512

      ba9518440625fef53101440c976951b5c8e2b07f946a975da77b8a7ab2cbfc795cd20a264f61ff1fc4a7c0b77ea9b75ed8a9c9e69b9d22ae65d10163a510c5a7

    • SSDEEP

      12288:PoZ5cyP2UluWW7hvraWyE/7bQGLnkQzeD6lHCMfm7HUb3s9a40:PoHhP2YW7hzak7bQ8HCM+4QI40

    Score
    10/10
    rhadamanthysdiscoverystealer

    • Rhadamanthys

      Rhadamanthys is an info stealer written in C++ first seen in August 2022.

      stealerrhadamanthys

    • Suspicious use of NtCreateUserProcessOtherParentProcess

    behavioral3behavioral4

MITRE ATT&CK Enterprise v15

Tasks