General

  • Target
    Portable.exe
  • Size 47.5MB
  • Sample240831-zz242awalg
  • SHA256 7c4e153855d42e10e3635b40f6471246624a3492a4c07170443a7fa9131eac33
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Extracted

Family
  • rhadamanthys

C2
  • https://185.161.251.6:5545/03a8d04906e4d03e0d308acd/homicide

Targets

    • Target
      Portable.exe
    • Size 47.5MB
    • SHA256 7c4e153855d42e10e3635b40f6471246624a3492a4c07170443a7fa9131eac33
    • MD5 SHA1 SHA512 SSDEEP
    • Rhadamanthys

      Rhadamanthys is an info stealer written in C++ first seen in August 2022.

    • Suspicious use of NtCreateUserProcessOtherParentProcess

MITRE ATT&CK Enterprise v15

Tasks