General
-
Target
raccountinfo.exe
-
Size
14.7MB
-
Sample
241120-w6sx6a1lfv
-
MD5
cec39e327f221e66a8ca3783088591e8
-
SHA1
54a488d89cae138c979c4aacde0c4139e2cfbc1e
-
SHA256
6e1eae1956b88b63424332497efd90f7eb9473d0149cd0950fd2267499274242
-
SHA512
80b0a1c4913b4822cd7cf9604d9e2e00fa88ddec5712d0e4a8614bde79a382626108a89251b9cfb41382c50248e40bc43823a650d6978c446debfb3975c6347b
-
SSDEEP
393216:4toHmHx10J1RXQR4lPY7VSyidmLhJEkiJBhKoXE+Wdktm8ObYxRM:4HRuH7PY7VOk4BcYuAm8Qx
Static task
static1
Behavioral task
behavioral1
Sample
raccountinfo.exe
Resource
win10v2004-20241007-en
Malware Config
Targets
-
-
Target
raccountinfo.exe
-
Size
14.7MB
-
MD5
cec39e327f221e66a8ca3783088591e8
-
SHA1
54a488d89cae138c979c4aacde0c4139e2cfbc1e
-
SHA256
6e1eae1956b88b63424332497efd90f7eb9473d0149cd0950fd2267499274242
-
SHA512
80b0a1c4913b4822cd7cf9604d9e2e00fa88ddec5712d0e4a8614bde79a382626108a89251b9cfb41382c50248e40bc43823a650d6978c446debfb3975c6347b
-
SSDEEP
393216:4toHmHx10J1RXQR4lPY7VSyidmLhJEkiJBhKoXE+Wdktm8ObYxRM:4HRuH7PY7VOk4BcYuAm8Qx
Score10/10-
Rhadamanthys
Rhadamanthys is an info stealer written in C++ first seen in August 2022.
-
Rhadamanthys family
-
Suspicious use of NtCreateUserProcessOtherParentProcess
-