General

  • Target
    sistercompetitive.exe
  • Size 7.3MB
  • Sample240909-e9sccssbqm
  • SHA256 471c981c11df004b941dad0175bc435f9c901bcb968ba9582f1a2181443d9ef4
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Extracted

Family
  • rhadamanthys

C2
  • https://45.202.35.41:2085/498d0f4cfcafbce1543c5cc/10m$

Targets

    • Target
      sistercompetitive.exe
    • Size 7.3MB
    • SHA256 471c981c11df004b941dad0175bc435f9c901bcb968ba9582f1a2181443d9ef4
    • MD5 SHA1 SHA512 SSDEEP
    • Rhadamanthys

      Rhadamanthys is an info stealer written in C++ first seen in August 2022.

    • Suspicious use of NtCreateUserProcessOtherParentProcess

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks