General

  • Target

    setup.exe

  • Size

    423KB

  • Sample

    230419-bl84esfd63

  • MD5

    e29bff52843372f6c9687b62c72bd929

  • SHA1

    6f5aaf919f32db47977ae5fbd1b1eb60e679770a

  • SHA256

    3d7566812366cea0ea926397e36f469b1b8ff5abd26fa0841dbecfbc7691530e

  • SHA512

    003aa38ca1261c8a6e83305dbe510bcb1aa4b4f31b1b559f6357f20bdcf75cfce83c3055888cf177befd642e17eac54a5b95c9e15c7232253c9d883a5edac018

  • SSDEEP

    6144:Hrwq1lCWWccnucf6JlN7/XZ3e/2ZI+obAzTIH0tnB+bi0y9Iv:HrflzWtu66JDrZq+okzTsYnBq5yuv

Malware Config

Extracted

Family

rhadamanthys

C2

http://179.43.142.201/img/favicon.png

Targets

    • Target

      setup.exe

    • Size

      423KB

    • MD5

      e29bff52843372f6c9687b62c72bd929

    • SHA1

      6f5aaf919f32db47977ae5fbd1b1eb60e679770a

    • SHA256

      3d7566812366cea0ea926397e36f469b1b8ff5abd26fa0841dbecfbc7691530e

    • SHA512

      003aa38ca1261c8a6e83305dbe510bcb1aa4b4f31b1b559f6357f20bdcf75cfce83c3055888cf177befd642e17eac54a5b95c9e15c7232253c9d883a5edac018

    • SSDEEP

      6144:Hrwq1lCWWccnucf6JlN7/XZ3e/2ZI+obAzTIH0tnB+bi0y9Iv:HrflzWtu66JDrZq+okzTsYnBq5yuv

    • Detect rhadamanthys stealer shellcode

    • Rhadamanthys

      Rhadamanthys is an info stealer written in C++ first seen in August 2022.

    • Accesses Microsoft Outlook profiles

MITRE ATT&CK Enterprise v6

Tasks