General

  • Target

    SecuriteInfo.com.Win64.Evo-gen.8364.21532.exe

  • Size

    438KB

  • Sample

    240703-swxltawcqa

  • MD5

    7691d7d1f5928448074900950ff80ec7

  • SHA1

    65025ed3950eca0eb5c253bfcad472f969dc2177

  • SHA256

    bab017ca2aa472dc3b0370dba0bd356939a62947f4ff83ef4810a70a68fab1df

  • SHA512

    b6012e6c7cbbb60e234a80edf4cd11e784533d97753ad24b4be1b55b715722b5de2076f5d2fa794a5ca216306a2ed54eb402843c280a566cba7036c4719f177f

  • SSDEEP

    12288:6uZZani4FaYkizhRpfX54K+uiE85ZzhzJ:6+ZIi4Z95/54K+uiE8Dd

Score
10/10

Malware Config

Targets

    • Target

      SecuriteInfo.com.Win64.Evo-gen.8364.21532.exe

    • Size

      438KB

    • MD5

      7691d7d1f5928448074900950ff80ec7

    • SHA1

      65025ed3950eca0eb5c253bfcad472f969dc2177

    • SHA256

      bab017ca2aa472dc3b0370dba0bd356939a62947f4ff83ef4810a70a68fab1df

    • SHA512

      b6012e6c7cbbb60e234a80edf4cd11e784533d97753ad24b4be1b55b715722b5de2076f5d2fa794a5ca216306a2ed54eb402843c280a566cba7036c4719f177f

    • SSDEEP

      12288:6uZZani4FaYkizhRpfX54K+uiE85ZzhzJ:6+ZIi4Z95/54K+uiE8Dd

    Score
    10/10
    • Rhadamanthys

      Rhadamanthys is an info stealer written in C++ first seen in August 2022.

    • Suspicious use of NtCreateUserProcessOtherParentProcess

MITRE ATT&CK Matrix

Tasks