Overview

overview

10

Static

static

3

Anubis.exe

windows11-21h2-x64

10

spooferconfig.dll

windows11-21h2-x64

1

Resubmissions

30/01/2025, 11:39

250130-nsaweszmft10

30/01/2025, 01:17

250130-bnfjwsvkh110

Sharing

Copy URL Twitter E-mail

General

  • Target
    nedfe.rar
  • Size 2.2MB
  • Sample250130-nsaweszmft
  • SHA256 e18b6d133656117a09751990c173b1a19136568d455b5b0c10b5e3e91151915b
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
rhadamanthysdefense_evasiondiscoverystealer

Malware Config

Extracted

Family

  • rhadamanthys

C2

  • https://195.3.223.126:4287/9d0dc091285eb9fbf2e/o8f3c8oj.8rdif

Targets

    • Target
      Anubis.exe
    • Size 1.2MB
    • SHA256 4b350ae0b85aa7f7818e37e3f02397cd3667af8d62eb3132fb3297bd96a0abe2
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    rhadamanthysdefense_evasiondiscoverystealer

    • Detect rhadamanthys stealer shellcode

    • Rhadamanthys

      Rhadamanthys is an info stealer written in C++ first seen in August 2022.

      stealerrhadamanthys

    • Rhadamanthys family

      rhadamanthys

    • Executes dropped EXE

    • Obfuscated Files or Information: Command Obfuscation

      Adversaries may obfuscate content during command execution to impede detection.

      defense_evasion
    behavioral1
    • Target
      spooferconfig.dll
    • Size 6.0MB
    • SHA256 35f12093577d9c58fe7858ca26a935aaf409269057a9a8bdf975693d6dfe208a
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    behavioral2

MITRE ATT&CK Enterprise v15

Tasks