General

  • Target
    f1c7a4791ac99c0e51bda7072cdcbd490ffd79902e96e76032324c7b5cd5859d
  • Size 423KB
  • Sample230414-tvtzzaae99
  • SHA256 f1c7a4791ac99c0e51bda7072cdcbd490ffd79902e96e76032324c7b5cd5859d
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Extracted

Family
  • rhadamanthys

C2
  • http://179.43.142.201/img/favicon.png

Targets

    • Target
      f1c7a4791ac99c0e51bda7072cdcbd490ffd79902e96e76032324c7b5cd5859d
    • Size 423KB
    • SHA256 f1c7a4791ac99c0e51bda7072cdcbd490ffd79902e96e76032324c7b5cd5859d
    • MD5 SHA1 SHA512 SSDEEP
    • Detect rhadamanthys stealer shellcode

    • Rhadamanthys

      Rhadamanthys is an info stealer written in C++ first seen in August 2022.

    • Accesses Microsoft Outlook profiles

MITRE ATT&CK Enterprise v6

Tasks