General
- Target DOC4310 - 43104310.zip
- Size 32KB
- Sample240406-enx1qaac21
- SHA256 3fe025beaa778b6836eecc2fa30231e301dd747b2f0a33e417be3df24803c05f
Score
10/10
Malware Config
Targets
-
- Target DOC4310 - 43104310.lnk
- Size 15KB
- SHA256 bb530d072743d54a2cd400181b1e80f08986360f7f55786d1438bffd00041569
Score10/10Rhadamanthys
Rhadamanthys is an info stealer written in C++ first seen in August 2022.
Suspicious use of NtCreateUserProcessOtherParentProcess
Blocklisted process makes network request
Checks computer location settings
Looks up country code configured in the registry, likely geofence.