Overview

overview

10

Static

static

1

rhada_pwsh.txt

windows10-2004-x64

10

Resubmissions

07/10/2024, 17:00

241007-vjaydszgnk10

07/10/2024, 16:55

241007-vfa4zsthjf1

07/10/2024, 16:31

241007-t1gxlatfrf1

07/10/2024, 16:22

241007-tvn4qazeqr10

Sharing

Copy URL Twitter E-mail

General

  • Target
    rhada_pwsh.txt
  • Size 472KB
  • Sample241007-vjaydszgnk
  • SHA256 88cb7c954db8b07a3c50405f106a13327811a476b8640b8c04a2b2952fcee84d
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
rhadamanthysstealer

Malware Config

Extracted

Family

  • rhadamanthys

C2

  • https://indscpm.xyz/bbb76d0e13310f0/b91e92i9.75aq5

Targets

    • Target
      rhada_pwsh.txt
    • Size 472KB
    • SHA256 88cb7c954db8b07a3c50405f106a13327811a476b8640b8c04a2b2952fcee84d
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    rhadamanthysstealer

    • Rhadamanthys

      Rhadamanthys is an info stealer written in C++ first seen in August 2022.

      stealerrhadamanthys

    • Suspicious use of NtCreateUserProcessOtherParentProcess

    behavioral1

MITRE ATT&CK Matrix

Tasks