General

  • Target

    e74aeaf93a550857cbf3d1fe9d13c420919c4d92ea9c7b2e0ce580ae8057955fN.exe

  • Size

    423KB

  • Sample

    241130-yg5a1asrfz

  • MD5

    b06511bb7fd960041b3feed3eb41ba10

  • SHA1

    83eae46ba9f85fa7380411aff1745d6476fad1c9

  • SHA256

    e74aeaf93a550857cbf3d1fe9d13c420919c4d92ea9c7b2e0ce580ae8057955f

  • SHA512

    ad6c1c4bdb45db4baafc3fa3c49d998a8b8adf70a4a71b3739fe890fdc4c47c3f2cfc9bb97049492177a07e8a025405b78990283f27df9136cf35e0f56f31030

  • SSDEEP

    6144:YAYM3ZEWqf/qwPF7LR5W8ZJ74zmRiOFBbMh9q/JSGx3ChNeK06iiRzmi0F9:YWBqf/qq3R5W8ZB4zmRzbaqIsViRUF9

Malware Config

Extracted

Family

rhadamanthys

C2

https://83.217.208.134/9fcc2685c3ccafd/mau3oarl.3v7qf

Targets

    • Target

      e74aeaf93a550857cbf3d1fe9d13c420919c4d92ea9c7b2e0ce580ae8057955fN.exe

    • Size

      423KB

    • MD5

      b06511bb7fd960041b3feed3eb41ba10

    • SHA1

      83eae46ba9f85fa7380411aff1745d6476fad1c9

    • SHA256

      e74aeaf93a550857cbf3d1fe9d13c420919c4d92ea9c7b2e0ce580ae8057955f

    • SHA512

      ad6c1c4bdb45db4baafc3fa3c49d998a8b8adf70a4a71b3739fe890fdc4c47c3f2cfc9bb97049492177a07e8a025405b78990283f27df9136cf35e0f56f31030

    • SSDEEP

      6144:YAYM3ZEWqf/qwPF7LR5W8ZJ74zmRiOFBbMh9q/JSGx3ChNeK06iiRzmi0F9:YWBqf/qq3R5W8ZB4zmRzbaqIsViRUF9

    • Rhadamanthys

      Rhadamanthys is an info stealer written in C++ first seen in August 2022.

    • Rhadamanthys family

    • Suspicious use of NtCreateUserProcessOtherParentProcess

MITRE ATT&CK Enterprise v15

Tasks