rhadamanthys

Resubmissions

16/01/2023, 15:09

230116-sjekgach7110

16/01/2023, 14:56

230116-sa1rcacg7v10

Sharing

Copy URL Twitter E-mail

General

Target
8fa42daf6061e46366c91bd6991e848d.exe
Size 232KB
Sample230116-sa1rcacg7v
SHA256 46bbfe68b3f82a610fa763c08375d7bff4e6729acb62f78630487b75c73d8324
MD5 8fa42daf6061e46366c91bd6991e848d
SHA1 14fa700f9eca38de4fdfbec2404f062e9166c6d6
SHA512 57c028ca4736cd84e06b4e7264f1cc63537130e472831060482c73d8e0c3260bb6fc21ab4e423e23cd48a247cdf91ab6c08d648c88bc66378f7125bb00f24aa7
SSDEEP 6144:DW3DcLLQ54mhUSMIAKgKClHyKwPXllDHXyUC:DW34LEimdgK0Nyvi
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

Malware Config

Targets

- Target
  8fa42daf6061e46366c91bd6991e848d.exe
- Size 232KB
- SHA256 46bbfe68b3f82a610fa763c08375d7bff4e6729acb62f78630487b75c73d8324
- MD5 8fa42daf6061e46366c91bd6991e848d
- SHA1 14fa700f9eca38de4fdfbec2404f062e9166c6d6
- SHA512 57c028ca4736cd84e06b4e7264f1cc63537130e472831060482c73d8e0c3260bb6fc21ab4e423e23cd48a247cdf91ab6c08d648c88bc66378f7125bb00f24aa7
- SSDEEP 6144:DW3DcLLQ54mhUSMIAKgKClHyKwPXllDHXyUC:DW34LEimdgK0Nyvi
- MD5 SHA1 SHA512 SSDEEP
Score

10^/10

smokeloader backdoor trojan rhadamanthys stealer
- Detect rhadamanthys stealer shellcode
- Detects Smokeloader packer
- Rhadamanthys
  Rhadamanthys is an info stealer written in C++ first seen in August 2022.
  stealer rhadamanthys
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Executes dropped EXE
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

Detect rhadamanthys stealer shellcode

Detects Smokeloader packer

SmokeLoader

Executes dropped EXE

Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks

static1

behavioral1

behavioral2