General

  • Target

    3dc8286613e87fae3dcabd5ce0f048ec38bdd2da89848da3c9513ea96b292204

  • Size

    419KB

  • Sample

    230416-czv96aab7w

  • MD5

    3290f04134c6cca11be6274a7b2bf0f9

  • SHA1

    ed958b562799268ab752201274fea16fd7b2cce3

  • SHA256

    3dc8286613e87fae3dcabd5ce0f048ec38bdd2da89848da3c9513ea96b292204

  • SHA512

    4438bd3ce5c7a70eaa0260dbdeb7028774cba592fe0ed3e565c09caf0d875cf0f3bd45a70606ab78012b44d00b3b05dbe0d28483ee0550bc1462ede86fd18b99

  • SSDEEP

    12288:Zer/LyAOtAVxmhgdGXgIBECCfGTVU1KiBTTq4:ZM/2AgcmhtXgIBEnfGTVUhTG4

Malware Config

Extracted

Family

rhadamanthys

C2

http://179.43.142.201/img/favicon.png

Targets

    • Target

      3dc8286613e87fae3dcabd5ce0f048ec38bdd2da89848da3c9513ea96b292204

    • Size

      419KB

    • MD5

      3290f04134c6cca11be6274a7b2bf0f9

    • SHA1

      ed958b562799268ab752201274fea16fd7b2cce3

    • SHA256

      3dc8286613e87fae3dcabd5ce0f048ec38bdd2da89848da3c9513ea96b292204

    • SHA512

      4438bd3ce5c7a70eaa0260dbdeb7028774cba592fe0ed3e565c09caf0d875cf0f3bd45a70606ab78012b44d00b3b05dbe0d28483ee0550bc1462ede86fd18b99

    • SSDEEP

      12288:Zer/LyAOtAVxmhgdGXgIBECCfGTVU1KiBTTq4:ZM/2AgcmhtXgIBEnfGTVUhTG4

    • Detect rhadamanthys stealer shellcode

    • Rhadamanthys

      Rhadamanthys is an info stealer written in C++ first seen in August 2022.

    • Accesses Microsoft Outlook profiles

MITRE ATT&CK Enterprise v6

Tasks