General
-
Target
SKRIPTGG-FIVEM-main.zip
-
Size
884KB
-
Sample
250115-2t2meszmfl
-
MD5
e5eb6a37e9cd8d4cd3d3a1879cc71bc0
-
SHA1
44936b7f945d8d8813e64f9b5708059d9714fcdf
-
SHA256
90c7d3b939db02faf27a670beedb61ffaf33a940119484a1b62dbfe21656afdd
-
SHA512
02eb80e5dff1551268abd6d366e36f88f8a940ceb2a4242b677a8823b51217e8fa8548d4abbd3c80ef9a112a2741cf75b09000ceb0da2cfe24df5303865c7cfd
-
SSDEEP
24576:nZQ6J4P2JcjGWJQmrfjNiVrGroGxgkIKgC:nJCuJQ9Jf/NqrGMGxUdC
Behavioral task
behavioral1
Sample
SKRIPTGG-FIVEM-main.zip
Resource
win11-20241007-en
Malware Config
Extracted
rhadamanthys
https://185.125.50.38:3034/739bd3e91cd40ca83/pancake.api
Targets
-
-
Target
SKRIPTGG-FIVEM-main.zip
-
Size
884KB
-
MD5
e5eb6a37e9cd8d4cd3d3a1879cc71bc0
-
SHA1
44936b7f945d8d8813e64f9b5708059d9714fcdf
-
SHA256
90c7d3b939db02faf27a670beedb61ffaf33a940119484a1b62dbfe21656afdd
-
SHA512
02eb80e5dff1551268abd6d366e36f88f8a940ceb2a4242b677a8823b51217e8fa8548d4abbd3c80ef9a112a2741cf75b09000ceb0da2cfe24df5303865c7cfd
-
SSDEEP
24576:nZQ6J4P2JcjGWJQmrfjNiVrGroGxgkIKgC:nJCuJQ9Jf/NqrGMGxUdC
Score10/10-
Rhadamanthys
Rhadamanthys is an info stealer written in C++ first seen in August 2022.
-
Rhadamanthys family
-
Suspicious use of NtCreateUserProcessOtherParentProcess
-
Executes dropped EXE
-
Legitimate hosting services abused for malware hosting/C2
-