Overview

overview

10

Static

static

3

About/About.pdf

windows7-x64

1

About/About.pdf

windows10-2004-x64

1

UpdatePack...64.exe

windows7-x64

10

UpdatePack...64.exe

windows10-2004-x64

10

Resubmissions

30/05/2023, 04:35

230530-e7xjasfb9810

24/05/2023, 11:54

230524-n253xscc8610

Sharing

Copy URL Twitter E-mail

General

  • Target
    UpdatePack-KB971033-x64.exe.7z
  • Size 445KB
  • Sample230530-e7xjasfb98
  • SHA256 df5db51c447e44c0753bde771c59f73a8266dad3fd0ab7189c2640bbf7ec5322
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
rhadamanthyslinkpdfstealer

Malware Config

Targets

    • Target
      About/About.pdf
    • Size 185KB
    • SHA256 dafccfc02c2ad502683ddf61224d6d66eba1e6d5ba13a92b15381af51bb4715a
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    behavioral1behavioral2
    • Target
      UpdatePack-KB971033-x64.exe
    • Size 656.4MB
    • SHA256 1faa0a86d8c56f85c46e1790c28d3c382ba4de6c7a6c8a0187f38fa52ee3c60d
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    rhadamanthysstealer

    • Rhadamanthys

      Rhadamanthys is an info stealer written in C++ first seen in August 2022.

      stealerrhadamanthys

    • Uses the VBS compiler for execution

    • Suspicious use of SetThreadContext

    behavioral3behavioral4

MITRE ATT&CK Enterprise v6

Tasks