General

  • Target

    SecuriteInfo.com.Variant.Zusy.448594.20833.28207.exe

  • Size

    179KB

  • Sample

    230224-qwth2sbe23

  • MD5

    27e018559bc0216c98fb188d3a3a8209

  • SHA1

    d0b477cf1d81182a2c0357432bd6b3e7a2bc43d4

  • SHA256

    563458d0d35d3e4a7809630809229fbe2977eabeb8639ceb677426308c156a3c

  • SHA512

    8ce3eccbef889189bebf0fd5cf36c257e4eba8344dc87d95d944718fd9bb16a833e951304420db0c46a9f4a8d050090b2758b709b5bacc47ed27b9a133b7e6be

  • SSDEEP

    3072:bwevYpKTDMDUqfuuE46lC4PQyfHU6Ig4cjnjFRpbll/XbqefxlS3ETgmBN8vqI5L:sevY8mlu3wB4HzlrzPOefxoEBK7

Malware Config

Targets

    • Target

      SecuriteInfo.com.Variant.Zusy.448594.20833.28207.exe

    • Size

      179KB

    • MD5

      27e018559bc0216c98fb188d3a3a8209

    • SHA1

      d0b477cf1d81182a2c0357432bd6b3e7a2bc43d4

    • SHA256

      563458d0d35d3e4a7809630809229fbe2977eabeb8639ceb677426308c156a3c

    • SHA512

      8ce3eccbef889189bebf0fd5cf36c257e4eba8344dc87d95d944718fd9bb16a833e951304420db0c46a9f4a8d050090b2758b709b5bacc47ed27b9a133b7e6be

    • SSDEEP

      3072:bwevYpKTDMDUqfuuE46lC4PQyfHU6Ig4cjnjFRpbll/XbqefxlS3ETgmBN8vqI5L:sevY8mlu3wB4HzlrzPOefxoEBK7

    • Detect rhadamanthys stealer shellcode

    • Rhadamanthys

      Rhadamanthys is an info stealer written in C++ first seen in August 2022.

    • Accesses Microsoft Outlook profiles

MITRE ATT&CK Enterprise v6

Tasks