General
-
Target
SilverRAT.exe
-
Size
448KB
-
Sample
241125-n1lmwsvpcw
-
MD5
e1e28c3acf184aa364c9ed9a30ab7289
-
SHA1
1a173a6f4ec39fe467f1b4b91c9fad794167ac1c
-
SHA256
03c72cfabace07b6787d2d1fd66d6d6d9a2fbcb74a827ca4ab7e59aba40cb306
-
SHA512
e8d38c9a144b7f4531e617de45dc240042a7b9ce7dd5766eb2f763b505d9786acccf54f3a03ff3639c36c957e2d14d34b5b59196170eb1b6b5f17e8a417d6991
-
SSDEEP
6144:nC5hyUR+MhyfUj6qfoMXYfIrvQ/zabJzYbLkBWBXpMcwLbjJgSqtUg83T36XE24r:v+BoMmID/mQmpMcmSSIU16XE2e5L
Behavioral task
behavioral1
Sample
SilverRAT.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
SilverRAT.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
rhadamanthys
https://95.214.55.177:2474/fae624c5418d6/black.api
Targets
-
-
Target
SilverRAT.exe
-
Size
448KB
-
MD5
e1e28c3acf184aa364c9ed9a30ab7289
-
SHA1
1a173a6f4ec39fe467f1b4b91c9fad794167ac1c
-
SHA256
03c72cfabace07b6787d2d1fd66d6d6d9a2fbcb74a827ca4ab7e59aba40cb306
-
SHA512
e8d38c9a144b7f4531e617de45dc240042a7b9ce7dd5766eb2f763b505d9786acccf54f3a03ff3639c36c957e2d14d34b5b59196170eb1b6b5f17e8a417d6991
-
SSDEEP
6144:nC5hyUR+MhyfUj6qfoMXYfIrvQ/zabJzYbLkBWBXpMcwLbjJgSqtUg83T36XE24r:v+BoMmID/mQmpMcmSSIU16XE2e5L
Score10/10-
Rhadamanthys
Rhadamanthys is an info stealer written in C++ first seen in August 2022.
-
Rhadamanthys family
-
Suspicious use of NtCreateUserProcessOtherParentProcess
-
Deletes itself
-