General

  • Target

    13ce15261aeb872b1784674deea88f38f9bc5b2d8ba77f0e8dca68d4fa311a78

  • Size

    275KB

  • Sample

    230412-e1rdpshg52

  • MD5

    9b0e25350a28a33372f4be9b92f132a7

  • SHA1

    ded2e0375fc767981d44795dfe1154a8cda17ba1

  • SHA256

    13ce15261aeb872b1784674deea88f38f9bc5b2d8ba77f0e8dca68d4fa311a78

  • SHA512

    92a70b141e3ca8e0fa1ce88e2e92fb996f72df7e38d50c1fdf564048e954dcadcb402307ec17d3c3e01d13a731e78e0e65ab55ea8d45e25d139a15fa3049f603

  • SSDEEP

    6144:vYURz9s1AnCwCHXaVaRamig7MydYzHNpWEiYaxT:ldnFmXIEmfNpWE

Malware Config

Targets

    • Target

      13ce15261aeb872b1784674deea88f38f9bc5b2d8ba77f0e8dca68d4fa311a78

    • Size

      275KB

    • MD5

      9b0e25350a28a33372f4be9b92f132a7

    • SHA1

      ded2e0375fc767981d44795dfe1154a8cda17ba1

    • SHA256

      13ce15261aeb872b1784674deea88f38f9bc5b2d8ba77f0e8dca68d4fa311a78

    • SHA512

      92a70b141e3ca8e0fa1ce88e2e92fb996f72df7e38d50c1fdf564048e954dcadcb402307ec17d3c3e01d13a731e78e0e65ab55ea8d45e25d139a15fa3049f603

    • SSDEEP

      6144:vYURz9s1AnCwCHXaVaRamig7MydYzHNpWEiYaxT:ldnFmXIEmfNpWE

    • Detect rhadamanthys stealer shellcode

    • Rhadamanthys

      Rhadamanthys is an info stealer written in C++ first seen in August 2022.

    • Accesses Microsoft Outlook profiles

MITRE ATT&CK Enterprise v6

Tasks