General

  • Target

    456-11-0x00000000001C0000-0x000000000023E000-memory.dmp

  • Size

    504KB

  • Sample

    241003-sqfq4ssbrl

  • MD5

    790758cfdcf7fbc19e7123163af23485

  • SHA1

    bd2d2eecabd24fbfd173c9fe405d6ca1818ae934

  • SHA256

    d6d61523371c36cc73b1047bbdb75d6cd8fada21990362dab4f27dd75cfe41d4

  • SHA512

    558f41c65e32b536a68f69f3e28c5cc10c1f7eeefab193ce008ef39dba680f21ee162cabd47da94458bd3a0cdeb7425651963b0fd2b2260a025859f0e135c9c4

  • SSDEEP

    12288:MWBqf/qq3R5W8ZB4zmRzbaBElDGJQ7F9:M9f93PW8ZBS+zbMiSQh

Malware Config

Extracted

Family

rhadamanthys

C2

https://185.209.161.207:2421/44194499adc4d2b753ee/bduh0f2e.ee92s

Targets

    • Target

      456-11-0x00000000001C0000-0x000000000023E000-memory.dmp

    • Size

      504KB

    • MD5

      790758cfdcf7fbc19e7123163af23485

    • SHA1

      bd2d2eecabd24fbfd173c9fe405d6ca1818ae934

    • SHA256

      d6d61523371c36cc73b1047bbdb75d6cd8fada21990362dab4f27dd75cfe41d4

    • SHA512

      558f41c65e32b536a68f69f3e28c5cc10c1f7eeefab193ce008ef39dba680f21ee162cabd47da94458bd3a0cdeb7425651963b0fd2b2260a025859f0e135c9c4

    • SSDEEP

      12288:MWBqf/qq3R5W8ZB4zmRzbaBElDGJQ7F9:M9f93PW8ZBS+zbMiSQh

    • Rhadamanthys

      Rhadamanthys is an info stealer written in C++ first seen in August 2022.

MITRE ATT&CK Enterprise v15

Tasks