Overview

overview

10

Static

static

3

Prove rela...à.exe

windows7-x64

10

Prove rela...à.exe

windows10-2004-x64

10

msimg32.dll

windows7-x64

3

msimg32.dll

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target
    daf5aa71d4cdbcc118abaa713a6c2140af1bbe6f6dba1fb79869bcb8563959f8.zip
  • Size 18.2MB
  • Sample250204-e857tswjas
  • SHA256 daf5aa71d4cdbcc118abaa713a6c2140af1bbe6f6dba1fb79869bcb8563959f8
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
rhadamanthysdiscoverypersistencestealer

Malware Config

Targets

    • Target
      Prove relative alla violazione dei diritti di proprietà.exe
    • Size 6.1MB
    • SHA256 08c7fb6067acc8ac207d28ab616c9ea5bc0d394956455d6a3eecb73f8010f7a2
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    rhadamanthysdiscoverypersistencestealer

    • Detects Rhadamanthys payload

    • Rhadamanthys

      Rhadamanthys is an info stealer written in C++ first seen in August 2022.

      stealerrhadamanthys

    • Rhadamanthys family

      rhadamanthys

    • Suspicious use of NtCreateUserProcessOtherParentProcess

    • Adds Run key to start application

      persistence
    behavioral1behavioral2
    • Target
      msimg32.dll
    • Size 32.0MB
    • SHA256 b234f0449e2e998879a11deb0937d7279d28b832348aa9f5c0e911a2dfe3847e
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    discovery
    behavioral3behavioral4

MITRE ATT&CK Enterprise v15

Tasks