General

  • Target
    bd434864980824e06ced11bf2469e67a.exe
  • Size 315KB
  • Sample230403-pt3s9sef85
  • SHA256 a4b6a1619cf4ff65770be120cc415de1e8897c2378610171f3c48ff0fa38e9fe
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Targets

    • Target
      bd434864980824e06ced11bf2469e67a.exe
    • Size 315KB
    • SHA256 a4b6a1619cf4ff65770be120cc415de1e8897c2378610171f3c48ff0fa38e9fe
    • MD5 SHA1 SHA512 SSDEEP
    • Detect rhadamanthys stealer shellcode

    • Rhadamanthys

      Rhadamanthys is an info stealer written in C++ first seen in August 2022.

    • Accesses Microsoft Outlook profiles

    • Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Enterprise v6

Tasks