Resubmissions

30/05/2023, 04:35

230530-e7xjasfb9810

24/05/2023, 11:54

230524-n253xscc8610

General

  • Target
    UpdatePack-KB971033-x64.exe.7z
  • Size 445KB
  • Sample230524-n253xscc86
  • SHA256 df5db51c447e44c0753bde771c59f73a8266dad3fd0ab7189c2640bbf7ec5322
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Targets

    • Target
      UpdatePack-KB971033-x64.exe
    • Size 656.4MB
    • SHA256 1faa0a86d8c56f85c46e1790c28d3c382ba4de6c7a6c8a0187f38fa52ee3c60d
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    • Rhadamanthys

      Rhadamanthys is an info stealer written in C++ first seen in August 2022.

    • Uses the VBS compiler for execution

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks