Resubmissions

21-08-2024 22:56

240821-2wm7tayfjp 10

07-08-2024 18:56

240807-xlv3fswapf 3

General

  • Target

    643d2764447b953c2203f53263ea1d66a361ceda7b72c3cdac7d633413596647

  • Size

    423KB

  • Sample

    240821-2wm7tayfjp

  • MD5

    d0b82a575215e373c4e0ff48de8dafd6

  • SHA1

    0f8905a68b025bed9f1d55048ba49fb341d297fc

  • SHA256

    643d2764447b953c2203f53263ea1d66a361ceda7b72c3cdac7d633413596647

  • SHA512

    1ce56ee90302062918adcfdf64767b34777703a177b64492679e3d2984483758bd9fc2be91a944a1a8c2a07e9af8cf10345079f95a471b786de33fa22b75eb34

  • SSDEEP

    6144:YAYM3ZEWqf/qwPF7LR5W8ZJ74zmRiOFBbMh9q/JSq3ChNeK06iiRzmi0F9:YWBqf/qq3R5W8ZB4zmRzbaNsViRUF9

Malware Config

Extracted

Family

rhadamanthys

C2

https://103.20.102.54:4582/35fe7de61adf9/3odpx5ck.6xklo

Targets

    • Target

      643d2764447b953c2203f53263ea1d66a361ceda7b72c3cdac7d633413596647

    • Size

      423KB

    • MD5

      d0b82a575215e373c4e0ff48de8dafd6

    • SHA1

      0f8905a68b025bed9f1d55048ba49fb341d297fc

    • SHA256

      643d2764447b953c2203f53263ea1d66a361ceda7b72c3cdac7d633413596647

    • SHA512

      1ce56ee90302062918adcfdf64767b34777703a177b64492679e3d2984483758bd9fc2be91a944a1a8c2a07e9af8cf10345079f95a471b786de33fa22b75eb34

    • SSDEEP

      6144:YAYM3ZEWqf/qwPF7LR5W8ZJ74zmRiOFBbMh9q/JSq3ChNeK06iiRzmi0F9:YWBqf/qq3R5W8ZB4zmRzbaNsViRUF9

    • Rhadamanthys

      Rhadamanthys is an info stealer written in C++ first seen in August 2022.

MITRE ATT&CK Enterprise v15

Tasks