Overview

overview

10

Static

static

5

Вооtst�...er.exe

windows10-ltsc_2021-x64

10

Вооtst�...ng.dll

windows10-ltsc_2021-x64

1

Вооtst�...ng.dll

windows10-ltsc_2021-x64

1

Вооtst�...ng.dll

windows10-ltsc_2021-x64

1

Resubmissions

23/06/2026, 09:55

260623-lx173ab15v10

23/06/2026, 09:54

260623-lxlglsbx8p5

06/04/2026, 18:21

260406-wzl62acy9v10

03/08/2025, 16:09

250803-tl68yavybx10

Sharing

Copy URL Twitter E-mail

General

  • Target
    Вооtstгаррег.zip
  • Size 3.8MB
  • Sample260623-lx173ab15v
  • SHA256 a6288ae02cbdd0454641384f3ad2f81d96e8562533c6fcba4e969273e2c40a53
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
rhadamanthysdiscoverystealer

Malware Config

Targets

    • Target
      Вооtstаррег/Bootstrapper.exe
    • Size 2.0MB
    • SHA256 92872c313ddf0ac95dcf111f7db5d9fec1cbc50dd1de9a21eb7679569649ec82
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    discoveryrhadamanthysstealer

    • Detects Rhadamanthys Payload

    • Family: Rhadamanthys

      Rhadamanthys is an info stealer written in C++ first seen in August 2022.

      stealerrhadamanthys

    • Suspicious use of SetThreadContext

    behavioral1
    • Target
      Вооtstаррег/locales/resources/app.asar.unpacked/node_modules/btime/binding.node
    • Size 118KB
    • SHA256 98c51303c38dc03faeeba13f26fa3c6645d0c1a502b8a5d28177ce015dacf35f
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral2
    • Target
      Вооtstаррег/locales/resources/app.asar.unpacked/node_modules/get-fonts/binding.node
    • Size 125KB
    • SHA256 149bc3824ecbf68f7a892a311e77548ea156963b88db0590063b50725c9d883c
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral3
    • Target
      Вооtstаррег/locales/resources/app.asar.unpacked/node_modules/vibrancy-win/binding.node
    • Size 118KB
    • SHA256 094bfeb0692885f1e56bb363e1065099eab48a7988c8603fd6a3fb49ec88b09c
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral4

MITRE ATT&CK Enterprise v16

Tasks