Overview

overview

10

Static

static

3

9096c9ab92...d0.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9096c9ab92e7832fcc34c80a121661c750af0c72b153a90a54e32452b78d73d0.zip

  • Size

    793KB

  • Sample

    250112-1mgs1a1jev

  • MD5

    b9008fc0b0d81f679cd35bae1e550f79

  • SHA1

    f1c23da4c5d14e0d851b8a354622cc2221d2589a

  • SHA256

    24411bc539838dd610798ac1fdf76760d12df23d275fe7c2b7ce51fc51eff2b9

  • SHA512

    51dc235f051fdd23169d221e22ebf2ee5c9871e143b5f0f1b9df0063d038ff62d8167cf5897f99d8a7deff4480e54ae9cc1e7bd2d97e5ae84b7c3ef08b0ed610

  • SSDEEP

    12288:Xlzx9e8ILfUAiKjk4diTiXvqCwR7W85k7ivJX/VJO/QCiNbf8wHdSj:XlvePfWKA4hXj07WJcJPVJO/+Nbf8w8j

Score
10/10
rhadamanthysdiscoverystealer

Malware Config

Extracted

Family

rhadamanthys

C2

https://217.197.107.204:443/e0bd9c1f4515facb49/gj28n35o.2n73x

Targets

    • Target

      9096c9ab92e7832fcc34c80a121661c750af0c72b153a90a54e32452b78d73d0.exe

    • Size

      1.1MB

    • MD5

      183d3258056265d85665725d1d995126

    • SHA1

      606765ff639a2699f0e9df650ceb91b658a5521d

    • SHA256

      9096c9ab92e7832fcc34c80a121661c750af0c72b153a90a54e32452b78d73d0

    • SHA512

      8a57e8ba15f59ae1f971888b3492a04a1faf5db104743998f3ea5c41477fb36c7572547c93302e343f3aa86b6a29a615a51b904d406c11694d10915bfe0ae925

    • SSDEEP

      24576:OoU4GxhwybZN2yb0ykH3t0P/Z63iY4Er6ySE4ppEakzEqEK/oi:OyWr2ybhkdLmPhAakzsqf

    Score
    10/10
    rhadamanthysdiscoverystealer

    • Rhadamanthys

      Rhadamanthys is an info stealer written in C++ first seen in August 2022.

      stealerrhadamanthys

    • Rhadamanthys family

      rhadamanthys

    • Suspicious use of NtCreateUserProcessOtherParentProcess

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks