Overview

overview

10

Static

static

1

raccountinfo.exe

windows7-x64

10

raccountinfo.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    raccountinfo.exe

  • Size

    14.7MB

  • Sample

    241120-xc5kjawkaq

  • MD5

    cec39e327f221e66a8ca3783088591e8

  • SHA1

    54a488d89cae138c979c4aacde0c4139e2cfbc1e

  • SHA256

    6e1eae1956b88b63424332497efd90f7eb9473d0149cd0950fd2267499274242

  • SHA512

    80b0a1c4913b4822cd7cf9604d9e2e00fa88ddec5712d0e4a8614bde79a382626108a89251b9cfb41382c50248e40bc43823a650d6978c446debfb3975c6347b

  • SSDEEP

    393216:4toHmHx10J1RXQR4lPY7VSyidmLhJEkiJBhKoXE+Wdktm8ObYxRM:4HRuH7PY7VOk4BcYuAm8Qx

Score
10/10
rhadamanthysdiscoverystealer

Malware Config

Targets

    • Target

      raccountinfo.exe

    • Size

      14.7MB

    • MD5

      cec39e327f221e66a8ca3783088591e8

    • SHA1

      54a488d89cae138c979c4aacde0c4139e2cfbc1e

    • SHA256

      6e1eae1956b88b63424332497efd90f7eb9473d0149cd0950fd2267499274242

    • SHA512

      80b0a1c4913b4822cd7cf9604d9e2e00fa88ddec5712d0e4a8614bde79a382626108a89251b9cfb41382c50248e40bc43823a650d6978c446debfb3975c6347b

    • SSDEEP

      393216:4toHmHx10J1RXQR4lPY7VSyidmLhJEkiJBhKoXE+Wdktm8ObYxRM:4HRuH7PY7VOk4BcYuAm8Qx

    Score
    10/10
    rhadamanthysdiscoverystealer

    • Rhadamanthys

      Rhadamanthys is an info stealer written in C++ first seen in August 2022.

      stealerrhadamanthys

    • Rhadamanthys family

      rhadamanthys

    • Suspicious use of NtCreateUserProcessOtherParentProcess

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks