General

  • Target

    Portable.exe

  • Size

    47.5MB

  • Sample

    240831-zz242awalg

  • MD5

    7914276bc13829ece91fb33f038a2344

  • SHA1

    e849ac762ff282d46966ba651bb1a50b570dac43

  • SHA256

    7c4e153855d42e10e3635b40f6471246624a3492a4c07170443a7fa9131eac33

  • SHA512

    184a6831dd66c7fe4444c5515dd702bab3cf3743fec7d2953f3f5d5387f18a5a3915290013500d74076d61b45817dc5c9b806598e13971c5f71596c5a8496002

  • SSDEEP

    786432:uCDyg3W4TaEhG4fsl6ny34lzK/szLPlwXu4Sk/f9VJxVNeKtmUVQ8E+5M5+bwMzk:uCWcaEhG4fsEnyIE/2LqXOk/f9VdIEm/

Malware Config

Extracted

Family

rhadamanthys

C2

https://185.161.251.6:5545/03a8d04906e4d03e0d308acd/homicide

Targets

    • Target

      Portable.exe

    • Size

      47.5MB

    • MD5

      7914276bc13829ece91fb33f038a2344

    • SHA1

      e849ac762ff282d46966ba651bb1a50b570dac43

    • SHA256

      7c4e153855d42e10e3635b40f6471246624a3492a4c07170443a7fa9131eac33

    • SHA512

      184a6831dd66c7fe4444c5515dd702bab3cf3743fec7d2953f3f5d5387f18a5a3915290013500d74076d61b45817dc5c9b806598e13971c5f71596c5a8496002

    • SSDEEP

      786432:uCDyg3W4TaEhG4fsl6ny34lzK/szLPlwXu4Sk/f9VJxVNeKtmUVQ8E+5M5+bwMzk:uCWcaEhG4fsEnyIE/2LqXOk/f9VdIEm/

    • Rhadamanthys

      Rhadamanthys is an info stealer written in C++ first seen in August 2022.

    • Suspicious use of NtCreateUserProcessOtherParentProcess

MITRE ATT&CK Enterprise v15

Tasks