Overview

overview

10

Static

static

1

JaffaCakes...0d.exe

windows7-x64

10

JaffaCakes...0d.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_1faa0a86d8c56f85c46e1790c28d3c382ba4de6c7a6c8a0187f38fa52ee3c60d

  • Size

    656.4MB

  • Sample

    241222-jmnswaznfq

  • MD5

    70e0aff711faae8f8d22bd77a6360985

  • SHA1

    6a9a40557c9491f453f10bf4cced5acfb9b42149

  • SHA256

    1faa0a86d8c56f85c46e1790c28d3c382ba4de6c7a6c8a0187f38fa52ee3c60d

  • SHA512

    8437b22e9f3f41cb92c19756bd0d7678245d38237eed682a97ff2f434977df6195712396f26480677a97fc29d3b5bbf789d5e40b5769d732df1f1fea025b2e34

  • SSDEEP

    6144:lMkSD+z3hVyHzDDzYepZZMSohQL6ncCDQRs3TXIrkUAlBSnSt/P:lu8kDPYs/johHREkDoSFP

Score
10/10
rhadamanthysdiscoverystealer

Malware Config

Targets

    • Target

      JaffaCakes118_1faa0a86d8c56f85c46e1790c28d3c382ba4de6c7a6c8a0187f38fa52ee3c60d

    • Size

      656.4MB

    • MD5

      70e0aff711faae8f8d22bd77a6360985

    • SHA1

      6a9a40557c9491f453f10bf4cced5acfb9b42149

    • SHA256

      1faa0a86d8c56f85c46e1790c28d3c382ba4de6c7a6c8a0187f38fa52ee3c60d

    • SHA512

      8437b22e9f3f41cb92c19756bd0d7678245d38237eed682a97ff2f434977df6195712396f26480677a97fc29d3b5bbf789d5e40b5769d732df1f1fea025b2e34

    • SSDEEP

      6144:lMkSD+z3hVyHzDDzYepZZMSohQL6ncCDQRs3TXIrkUAlBSnSt/P:lu8kDPYs/johHREkDoSFP

    Score
    10/10
    rhadamanthysdiscoverystealer

    • Rhadamanthys

      Rhadamanthys is an info stealer written in C++ first seen in August 2022.

      stealerrhadamanthys

    • Rhadamanthys family

      rhadamanthys

    • Uses the VBS compiler for execution

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks