General

  • Target

    570735feb7b69d084c2ce38114f43f5134e4eadfa727e95c1a466cd6ef5a82a0

  • Size

    298KB

  • Sample

    230419-z1zqasdd97

  • MD5

    11bf9926ee719c1cb2283a028833d577

  • SHA1

    676040a478027bb82a5ea76ef45913acc057dd70

  • SHA256

    570735feb7b69d084c2ce38114f43f5134e4eadfa727e95c1a466cd6ef5a82a0

  • SHA512

    6687780cc77ebe6128d02ec61c9a564a06b92866f4a42d0293bb418b473e7541adc18191d1941c723fcb0d1bf3c16e6ea85748acbfa45ecc3681e7dd8aa3f743

  • SSDEEP

    6144:Ra4q8r+PnDhWFGsWNd00W+PIyUlLVutg4/ve:RXNr+PnDAIskW+PpUlS

Malware Config

Extracted

Family

rhadamanthys

C2

http://179.43.142.201/img/favicon.png

Targets

    • Target

      570735feb7b69d084c2ce38114f43f5134e4eadfa727e95c1a466cd6ef5a82a0

    • Size

      298KB

    • MD5

      11bf9926ee719c1cb2283a028833d577

    • SHA1

      676040a478027bb82a5ea76ef45913acc057dd70

    • SHA256

      570735feb7b69d084c2ce38114f43f5134e4eadfa727e95c1a466cd6ef5a82a0

    • SHA512

      6687780cc77ebe6128d02ec61c9a564a06b92866f4a42d0293bb418b473e7541adc18191d1941c723fcb0d1bf3c16e6ea85748acbfa45ecc3681e7dd8aa3f743

    • SSDEEP

      6144:Ra4q8r+PnDhWFGsWNd00W+PIyUlLVutg4/ve:RXNr+PnDAIskW+PpUlS

    • Detect rhadamanthys stealer shellcode

    • Rhadamanthys

      Rhadamanthys is an info stealer written in C++ first seen in August 2022.

    • Accesses Microsoft Outlook profiles

MITRE ATT&CK Enterprise v6

Tasks