General

  • Target
    dff2e9fb94f1d24b1f48288af0bf9d3bf76dc039f6e270ef2c44eb26e96179af
  • Size 298KB
  • Sample230419-v9956scd44
  • SHA256 dff2e9fb94f1d24b1f48288af0bf9d3bf76dc039f6e270ef2c44eb26e96179af
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Extracted

Family
  • rhadamanthys

C2
  • http://179.43.142.201/img/favicon.png

Targets

    • Target
      dff2e9fb94f1d24b1f48288af0bf9d3bf76dc039f6e270ef2c44eb26e96179af
    • Size 298KB
    • SHA256 dff2e9fb94f1d24b1f48288af0bf9d3bf76dc039f6e270ef2c44eb26e96179af
    • MD5 SHA1 SHA512 SSDEEP
    • Detect rhadamanthys stealer shellcode

    • Rhadamanthys

      Rhadamanthys is an info stealer written in C++ first seen in August 2022.

    • Accesses Microsoft Outlook profiles

MITRE ATT&CK Enterprise v6

Tasks