General

  • Target

    b1a7d59539e789763e967266520191c1c5e76671d3955caf69eb8491952b14d9

  • Size

    2.7MB

  • Sample

    241025-cg69pssdqh

  • MD5

    44bfe82d2a51a9683be239862885e68e

  • SHA1

    6bd6644818b00cde8147ee6fdfa42c89ad160ff0

  • SHA256

    b1a7d59539e789763e967266520191c1c5e76671d3955caf69eb8491952b14d9

  • SHA512

    e6534a42d85d49e581587798d83c6c2ad5b56a71b4628c43a0f028244d0fb5f0d1ec6163cc4f6ff4898450e5298961a788d4191284b8b0ceace11cf9d7b51bc6

  • SSDEEP

    49152:YXSVB7xMLe8fU/Q/kU/Q/yIEgVFtM+pj9fMTss:jMLe2U/Q/kU/Q/RE+vUX

Malware Config

Extracted

Family

rhadamanthys

C2

https://198.251.84.78:6495/355f5a5585bfaf/casqu0xi.k9xtg

Targets

    • Target

      b1a7d59539e789763e967266520191c1c5e76671d3955caf69eb8491952b14d9

    • Size

      2.7MB

    • MD5

      44bfe82d2a51a9683be239862885e68e

    • SHA1

      6bd6644818b00cde8147ee6fdfa42c89ad160ff0

    • SHA256

      b1a7d59539e789763e967266520191c1c5e76671d3955caf69eb8491952b14d9

    • SHA512

      e6534a42d85d49e581587798d83c6c2ad5b56a71b4628c43a0f028244d0fb5f0d1ec6163cc4f6ff4898450e5298961a788d4191284b8b0ceace11cf9d7b51bc6

    • SSDEEP

      49152:YXSVB7xMLe8fU/Q/kU/Q/yIEgVFtM+pj9fMTss:jMLe2U/Q/kU/Q/RE+vUX

    • Rhadamanthys

      Rhadamanthys is an info stealer written in C++ first seen in August 2022.

MITRE ATT&CK Enterprise v15

Tasks