General

  • Target

    19488859028.zip

  • Size

    268KB

  • Sample

    241018-fnt5haydqh

  • MD5

    7caaf25debf568e1d12d7174a67c34d8

  • SHA1

    7adeb8c03037c5cb32e7f6c9a2d8240967eb1f32

  • SHA256

    c451811b5c09b56af68466d3cd73fbf2c7ddda6dc164113df9f2e7e93ed4d95a

  • SHA512

    b16be53093e840b7cf4e3f70087919d3277e316119685fc8600e3a2a27f870e1be80034c14703f391150cc9134abd8eb3d9096d051cae203ad29a2259d075bdb

  • SSDEEP

    6144:yvFY8sUMfCbUoRvHn83x6usulQ6abkpYNS9AgkdX:x8sUMfCbUoln83xoul9ch

Malware Config

Extracted

Family

rhadamanthys

C2

https://5.42.99.132:443/e0bd9c1f4515facb49/gj28n35o.2n73x

Targets

    • Target

      8088aedd53e360cee68378465155fa95aab5b583ac863a2e83cb5817f90c47ab

    • Size

      428KB

    • MD5

      03bdcac4fbba86e21290393cc7e882c8

    • SHA1

      fcf291422238277b4ec2650af2e4abe097aeecd6

    • SHA256

      8088aedd53e360cee68378465155fa95aab5b583ac863a2e83cb5817f90c47ab

    • SHA512

      3e3a98b4def030ee59958901ee62a83ce3ce5d8dfa5e4a5f466b201d71711d48dc7e5954441172915b1bc2c8749877cb23bed4982c72349122300c2be1d0374e

    • SSDEEP

      6144:+AYM3ZEWqf/qwPF7LR5W8ZJ74zmRiOFBbMh9q/JSa3ChNeK06iiRzmi0F95iK:+WBqf/qq3R5W8ZB4zmRzbaNsViRUF9gK

    • Rhadamanthys

      Rhadamanthys is an info stealer written in C++ first seen in August 2022.

MITRE ATT&CK Enterprise v15

Tasks