Resubmissions

27/11/2024, 10:03

241127-l3hmxaypaw10

01/08/2024, 15:54

240801-tcb2fasenh10

05/04/2024, 12:07

240405-pakhksca79

18/07/2023, 20:01

230718-yrm5gaec6v10

General

  • Target
    rh_0.4.9.exe
  • Size 456KB
  • Sample240801-tcb2fasenh
  • SHA256 f0f70c6ba7dcb338794ee0034250f5f98fc6bddea0922495af863421baf4735f
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Targets

    • Target
      rh_0.4.9.exe
    • Size 456KB
    • SHA256 f0f70c6ba7dcb338794ee0034250f5f98fc6bddea0922495af863421baf4735f
    • MD5 SHA1 SHA512 SSDEEP
    • Detect rhadamanthys stealer shellcode

    • Rhadamanthys

      Rhadamanthys is an info stealer written in C++ first seen in August 2022.

    • Suspicious use of NtCreateUserProcessOtherParentProcess

MITRE ATT&CK Enterprise v15

Tasks