General

  • Target

    dfc221c1422a7a5bbed87f30993d5f40f9db8af66e181ff44b316d773c9a2e93

  • Size

    416KB

  • Sample

    230424-h6yxhsad62

  • MD5

    42101b17728ec6cd7ade8ce9cbc8aad8

  • SHA1

    7ae801b3277869c0222b2bafa09cb7aac51bfdbe

  • SHA256

    dfc221c1422a7a5bbed87f30993d5f40f9db8af66e181ff44b316d773c9a2e93

  • SHA512

    96021beeaa62899fc36991016a25f37fdd2324914d190dc279814a70d6079178b935097fce07fc62bedb83ed05346e48c8d13ad0bf10ae72f71a04ce3516ef16

  • SSDEEP

    12288:JJ5A7EtNuuIAwAjzj9wi6j+dg9DZW2+nv3nQ4:J/UEtN7wAjz2qdg9D8v3L

Malware Config

Extracted

Family

rhadamanthys

C2

http://179.43.142.201/img/favicon.png

Targets

    • Target

      dfc221c1422a7a5bbed87f30993d5f40f9db8af66e181ff44b316d773c9a2e93

    • Size

      416KB

    • MD5

      42101b17728ec6cd7ade8ce9cbc8aad8

    • SHA1

      7ae801b3277869c0222b2bafa09cb7aac51bfdbe

    • SHA256

      dfc221c1422a7a5bbed87f30993d5f40f9db8af66e181ff44b316d773c9a2e93

    • SHA512

      96021beeaa62899fc36991016a25f37fdd2324914d190dc279814a70d6079178b935097fce07fc62bedb83ed05346e48c8d13ad0bf10ae72f71a04ce3516ef16

    • SSDEEP

      12288:JJ5A7EtNuuIAwAjzj9wi6j+dg9DZW2+nv3nQ4:J/UEtN7wAjz2qdg9D8v3L

    • Detect rhadamanthys stealer shellcode

    • Rhadamanthys

      Rhadamanthys is an info stealer written in C++ first seen in August 2022.

    • Accesses Microsoft Outlook profiles

MITRE ATT&CK Enterprise v6

Tasks