Overview

overview

10

Static

static

3

2024-06-19...il.exe

windows7-x64

10

2024-06-19...il.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-06-19_81a91432728086f4e842b7548c663492_magniber_revil

  • Size

    58.5MB

  • Sample

    240619-lgghqasdpn

  • MD5

    81a91432728086f4e842b7548c663492

  • SHA1

    1159a7a62d0294f697aedd2331daa7068d39f163

  • SHA256

    4c55bb0be66138f9c0a14afe676b5f27bd5e51faf3116a5130e08ae810630ada

  • SHA512

    c7f25fe90f73c0a9bb81bc60aa1e53409ac04306ffee1370a5f265eea388d7ca82b84340c0481c61a98c4c0987f154e8ef448cb2b52800e2f4a06f33abe46e83

  • SSDEEP

    1572864:hNpJfO/7sER9gQWwUPGxZH0Zfy7l41HJHvE5ZyDiEMKrM:hHwPDKDvMKA

Score
10/10
rhadamanthyspersistencestealer

Malware Config

Targets

    • Target

      2024-06-19_81a91432728086f4e842b7548c663492_magniber_revil

    • Size

      58.5MB

    • MD5

      81a91432728086f4e842b7548c663492

    • SHA1

      1159a7a62d0294f697aedd2331daa7068d39f163

    • SHA256

      4c55bb0be66138f9c0a14afe676b5f27bd5e51faf3116a5130e08ae810630ada

    • SHA512

      c7f25fe90f73c0a9bb81bc60aa1e53409ac04306ffee1370a5f265eea388d7ca82b84340c0481c61a98c4c0987f154e8ef448cb2b52800e2f4a06f33abe46e83

    • SSDEEP

      1572864:hNpJfO/7sER9gQWwUPGxZH0Zfy7l41HJHvE5ZyDiEMKrM:hHwPDKDvMKA

    Score
    10/10
    rhadamanthyspersistencestealer

    • Rhadamanthys

      Rhadamanthys is an info stealer written in C++ first seen in August 2022.

      stealerrhadamanthys

    • Suspicious use of NtCreateUserProcessOtherParentProcess

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks