General
- Target b1ad5aa40c89bce3ed9d22762085fb2b.exe
- Size 4.0MB
- Sample240322-jft2baaa65
- SHA256 276cbe0ca43aabec2125a96eb626dd419d0a4ebd275376113d84ade08bbaa3bf
- MD5 b1ad5aa40c89bce3ed9d22762085fb2b
- SHA1 c93518cff3e1554a9d9112b972bcfcdef77f6fed
- SHA512 6dc10010fbe21dd1f43d5465952b2ba39882c9c1cb3c9285d531fab937d18c2e1590a5987aad46d7f0a7fe41587f2b69a10095eb46f18acdd52533c48740605f
- SSDEEP 98304:sfUbEBPzHDUZsrqpj4F4i0OY1ZjBpyTvodRYVBAywLtQzG:sfUoPzHDUZsrqpkFraUTvodRGAy4AG
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
b1ad5aa40c89bce3ed9d22762085fb2b.exe
Resource
win7-20240215-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
b1ad5aa40c89bce3ed9d22762085fb2b.exe
Resource
win10v2004-20240226-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target b1ad5aa40c89bce3ed9d22762085fb2b.exe
- Size 4.0MB
- SHA256 276cbe0ca43aabec2125a96eb626dd419d0a4ebd275376113d84ade08bbaa3bf
- MD5 b1ad5aa40c89bce3ed9d22762085fb2b
- SHA1 c93518cff3e1554a9d9112b972bcfcdef77f6fed
- SHA512 6dc10010fbe21dd1f43d5465952b2ba39882c9c1cb3c9285d531fab937d18c2e1590a5987aad46d7f0a7fe41587f2b69a10095eb46f18acdd52533c48740605f
- SSDEEP 98304:sfUbEBPzHDUZsrqpj4F4i0OY1ZjBpyTvodRYVBAywLtQzG:sfUoPzHDUZsrqpkFraUTvodRGAy4AG
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Rhadamanthys
Rhadamanthys is an info stealer written in C++ first seen in August 2022.
-
Suspicious use of NtCreateUserProcessOtherParentProcess
-
Executes dropped EXE
-
Loads dropped DLL
-
Suspicious use of SetThreadContext