Analysis
-
max time kernel
19s -
max time network
19s -
platform
windows7_x64 -
resource
win7-20241010-en -
resource tags
-
submitted
20-11-2024 18:43
General
-
Target
raccountinfo.exe
-
Size
14.7MB
-
MD5
cec39e327f221e66a8ca3783088591e8
-
SHA1
54a488d89cae138c979c4aacde0c4139e2cfbc1e
-
SHA256
6e1eae1956b88b63424332497efd90f7eb9473d0149cd0950fd2267499274242
-
SHA512
80b0a1c4913b4822cd7cf9604d9e2e00fa88ddec5712d0e4a8614bde79a382626108a89251b9cfb41382c50248e40bc43823a650d6978c446debfb3975c6347b
-
SSDEEP
393216:4toHmHx10J1RXQR4lPY7VSyidmLhJEkiJBhKoXE+Wdktm8ObYxRM:4HRuH7PY7VOk4BcYuAm8Qx
Score
10/10
Malware Config
Signatures
-
Rhadamanthys
Rhadamanthys is an info stealer written in C++ first seen in August 2022.
-
Rhadamanthys family
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\raccountinfo.exe"C:\Users\Admin\AppData\Local\Temp\raccountinfo.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
504KB
-
Filesize
504KB