General

  • Target

    QuantumBuilder.rar

  • Size

    9.1MB

  • Sample

    241217-x21mwavpa1

  • MD5

    c0ed0bbdfc88aedb9cd6c4565b28cbd9

  • SHA1

    f52202bab3ce63a277a3803d5cd2804b491380e6

  • SHA256

    47e88a611ebe9b394166957a6b5208607d530c84af47b89251c32f58c1fdcfc3

  • SHA512

    6acb227198311db37c83f5a896033f0c222b369123973d0e1c87630da25ae70ba87492cebddc49772f448e80cb5b4b0b05fb27ee9765c3b06108acaf2ce12f5f

  • SSDEEP

    196608:GjNcw/2acMvHOXniGV3MIgUVyDzr/ZsQHFs9jK7RpYDhOs0:mNcjacgHOSq8+c/1l37Yo

Malware Config

Extracted

Family

rhadamanthys

C2

https://95.214.55.177:1689/e21adcd5478c6d21f12/jf923j9f.kd10d2

Targets

    • Target

      QuantumBuilder.rar

    • Size

      9.1MB

    • MD5

      c0ed0bbdfc88aedb9cd6c4565b28cbd9

    • SHA1

      f52202bab3ce63a277a3803d5cd2804b491380e6

    • SHA256

      47e88a611ebe9b394166957a6b5208607d530c84af47b89251c32f58c1fdcfc3

    • SHA512

      6acb227198311db37c83f5a896033f0c222b369123973d0e1c87630da25ae70ba87492cebddc49772f448e80cb5b4b0b05fb27ee9765c3b06108acaf2ce12f5f

    • SSDEEP

      196608:GjNcw/2acMvHOXniGV3MIgUVyDzr/ZsQHFs9jK7RpYDhOs0:mNcjacgHOSq8+c/1l37Yo

    • Rhadamanthys

      Rhadamanthys is an info stealer written in C++ first seen in August 2022.

    • Rhadamanthys family

    • Executes dropped EXE

MITRE ATT&CK Enterprise v15

Tasks