General

  • Target
    setup.exe
  • Size 297KB
  • Sample230331-byjdjahe7s
  • SHA256 b1c5d2eadbb2936f8b9644a5a4e24b5c54b163f0f2d6817c60edb3e5a73c6dc6
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Targets

    • Target
      setup.exe
    • Size 297KB
    • SHA256 b1c5d2eadbb2936f8b9644a5a4e24b5c54b163f0f2d6817c60edb3e5a73c6dc6
    • MD5 SHA1 SHA512 SSDEEP
    • Detect rhadamanthys stealer shellcode

    • Rhadamanthys

      Rhadamanthys is an info stealer written in C++ first seen in August 2022.

    • Accesses Microsoft Outlook profiles

    • Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Enterprise v6

Tasks