Overview

overview

10

Static

static

3

d3d11.dll

windows7-x64

3

d3d11.dll

windows10-2004-x64

3

setup.exe

windows7-x64

10

setup.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    35bb534e6ca0b9dc7a14e8c1ba708c97e318387bac09cbc150473d91b6a2d8db.zip

  • Size

    3.0MB

  • Sample

    241011-bpl33asgnr

  • MD5

    482631dd172f503a6bf2c622faaef3c7

  • SHA1

    f910e00a81bdd47110fd651d181e981ab9c3371c

  • SHA256

    35bb534e6ca0b9dc7a14e8c1ba708c97e318387bac09cbc150473d91b6a2d8db

  • SHA512

    343498d3c0e64e8742b53b9443d1b48d695183ebf944b89f4f8f896cdf01cab55e7c7449843ec239a25d9f6cb71ada42b8045b9d0ebedc8ab7f4c53da65fe1d1

  • SSDEEP

    49152:+0Df17SYa2APxBpcuZpfDyQ/iF8R3QinAhbX2Vr8Df6zP:7Dd7SCAPXpcuZV/iF8R3znAhbXg0f2P

Score
10/10
rhadamanthysdiscoverystealer

Malware Config

Targets

    • Target

      d3d11.dll

    • Size

      760.0MB

    • MD5

      4c73b7d9eb09095899cdff6785d4f8a4

    • SHA1

      2a9a608bf6b005d655e3e3e19baab52928bb2795

    • SHA256

      d7281141c92ebbaa12bfee27006325950be3121fede3d74fb68540b2babf402b

    • SHA512

      ffbd5fc43d9c44c238d95f384071519596d0a0e8a35b66dded2baed25433fc30118bb2f6d4830116140c6dd483941478e3c9b4df35207051a1132ea3d65ded41

    • SSDEEP

      196608:VnAO4YLd6cBToqh+/plnAO4YLd6cBToqh+/p:tAO46d6cBToqk/rAO46d6cBToqk/

    Score
    3/10
    discovery
    behavioral1behavioral2

    • Target

      setup.exe

    • Size

      678KB

    • MD5

      fd57b4457b9c453bf563559c53b9071b

    • SHA1

      08eb3a76af5c337b73f50efe5a27c43b68edce88

    • SHA256

      995bf2a06730050f99f6e5ff53d641e1e98f022e7d7c376d91d65959aa79a70e

    • SHA512

      ba9518440625fef53101440c976951b5c8e2b07f946a975da77b8a7ab2cbfc795cd20a264f61ff1fc4a7c0b77ea9b75ed8a9c9e69b9d22ae65d10163a510c5a7

    • SSDEEP

      12288:PoZ5cyP2UluWW7hvraWyE/7bQGLnkQzeD6lHCMfm7HUb3s9a40:PoHhP2YW7hzak7bQ8HCM+4QI40

    Score
    10/10
    rhadamanthysdiscoverystealer

    • Rhadamanthys

      Rhadamanthys is an info stealer written in C++ first seen in August 2022.

      stealerrhadamanthys

    • Suspicious use of NtCreateUserProcessOtherParentProcess

    behavioral3behavioral4

MITRE ATT&CK Enterprise v15

Tasks