General

  • Target

    1f345a1671523926cf7c62e3f4a85b19a2559a6117519eab5f44aad967072357

  • Size

    456KB

  • Sample

    241127-l4deksypdz

  • MD5

    10e841b7d0bff1a7aa989ebdf7f35976

  • SHA1

    0aef47167e8202c6a2fe2863cf493f3e798b9676

  • SHA256

    1f345a1671523926cf7c62e3f4a85b19a2559a6117519eab5f44aad967072357

  • SHA512

    c375a3f0ea9993255e4f6111423dd019ed7e913da2b9f06a0c4644940f4adb33c8c8cb75e16190edfb7bf6b15109ca2fdf9e8c760d402807ef91bb6b2bfc5f3e

  • SSDEEP

    6144:2uWP/BtSnurUylcrGYlnIttxv8HbcLgsd1Gus5psdrvV44dixP+MHDkBYdxtG9+E:2uWP/BZUyoLu8Agsmxwrvejkd2

Malware Config

Extracted

Family

rhadamanthys

C2

https://45.12.253.92:7079/d93563d629a84c3/lja633cp.sdqdm

Targets

    • Target

      1f345a1671523926cf7c62e3f4a85b19a2559a6117519eab5f44aad967072357

    • Size

      456KB

    • MD5

      10e841b7d0bff1a7aa989ebdf7f35976

    • SHA1

      0aef47167e8202c6a2fe2863cf493f3e798b9676

    • SHA256

      1f345a1671523926cf7c62e3f4a85b19a2559a6117519eab5f44aad967072357

    • SHA512

      c375a3f0ea9993255e4f6111423dd019ed7e913da2b9f06a0c4644940f4adb33c8c8cb75e16190edfb7bf6b15109ca2fdf9e8c760d402807ef91bb6b2bfc5f3e

    • SSDEEP

      6144:2uWP/BtSnurUylcrGYlnIttxv8HbcLgsd1Gus5psdrvV44dixP+MHDkBYdxtG9+E:2uWP/BZUyoLu8Agsmxwrvejkd2

    • Detect rhadamanthys stealer shellcode

    • Rhadamanthys

      Rhadamanthys is an info stealer written in C++ first seen in August 2022.

    • Rhadamanthys family

MITRE ATT&CK Enterprise v15

Tasks