General
-
Target
xexecutor.exe
-
Size
19.8MB
-
Sample
240705-ssa9ea1arn
-
MD5
3f143cb6d87deecda2da2b1c8da5c0bd
-
SHA1
42721ea6a7a5debcc9193bcd7230922aae68bf03
-
SHA256
509e77fcd7effd3229cfdaba1c52fc413e20197e91b5af414b4c14257097b1c6
-
SHA512
9e420b9de31daa227be36e818d1a607a03db71d4aabb2a2434118928773616d2a40f2847cbe0d867b3112a66939812d04e532e0a76a44ff0b01475626405b279
-
SSDEEP
49152:KeC6HNwKTa+aUlx9RoFWKnNtONwyhg/0IizKiwNRrsOVF1ux89GVnsVOVLGt3tME:zXbJ1Rr5C
Static task
static1
Behavioral task
behavioral1
Sample
xexecutor.exe
Resource
win10-20240404-en
Malware Config
Targets
-
-
Target
xexecutor.exe
-
Size
19.8MB
-
MD5
3f143cb6d87deecda2da2b1c8da5c0bd
-
SHA1
42721ea6a7a5debcc9193bcd7230922aae68bf03
-
SHA256
509e77fcd7effd3229cfdaba1c52fc413e20197e91b5af414b4c14257097b1c6
-
SHA512
9e420b9de31daa227be36e818d1a607a03db71d4aabb2a2434118928773616d2a40f2847cbe0d867b3112a66939812d04e532e0a76a44ff0b01475626405b279
-
SSDEEP
49152:KeC6HNwKTa+aUlx9RoFWKnNtONwyhg/0IizKiwNRrsOVF1ux89GVnsVOVLGt3tME:zXbJ1Rr5C
Score10/10-
Rhadamanthys
Rhadamanthys is an info stealer written in C++ first seen in August 2022.
-
Suspicious use of NtCreateUserProcessOtherParentProcess
-