General

  • Target

    20240906aeaebc8cffa9107b578085fabe1e322fmagniberrevilrhadamanthys

  • Size

    70.4MB

  • Sample

    240906-l7d6aa1brg

  • MD5

    aeaebc8cffa9107b578085fabe1e322f

  • SHA1

    2c8f6f856f95011e7e7b07750eaa1e62b0e2bccf

  • SHA256

    dd2eb9d22643740f44a63da407921b8dc80f5c539995087825fc9c10e69d4de7

  • SHA512

    6947290e93a277458ffc62c79d2458e3b7fcd782090052a0a9c1ac396ccc38fd48d2b208f979242229b3f894748a882aec43e06a55feba3d4bb3d1e098ee6147

  • SSDEEP

    1572864:FoxuVkox/ETpYcqn1GRa6CzAYhYbinNSMpZ5KcR8UqCIayPlDI:uMpovG

Malware Config

Targets

    • Target

      20240906aeaebc8cffa9107b578085fabe1e322fmagniberrevilrhadamanthys

    • Size

      70.4MB

    • MD5

      aeaebc8cffa9107b578085fabe1e322f

    • SHA1

      2c8f6f856f95011e7e7b07750eaa1e62b0e2bccf

    • SHA256

      dd2eb9d22643740f44a63da407921b8dc80f5c539995087825fc9c10e69d4de7

    • SHA512

      6947290e93a277458ffc62c79d2458e3b7fcd782090052a0a9c1ac396ccc38fd48d2b208f979242229b3f894748a882aec43e06a55feba3d4bb3d1e098ee6147

    • SSDEEP

      1572864:FoxuVkox/ETpYcqn1GRa6CzAYhYbinNSMpZ5KcR8UqCIayPlDI:uMpovG

    • Rhadamanthys

      Rhadamanthys is an info stealer written in C++ first seen in August 2022.

    • Suspicious use of NtCreateUserProcessOtherParentProcess

MITRE ATT&CK Enterprise v15

Tasks