Overview

overview

10

Static

static

3

2026-03-28...op.exe

windows10-2004-x64

10

2026-03-28...op.exe

windows11-21h2-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    2026-03-28_afed85819bbe786d1c7ad957e4c4ad2c_elex_rhadamanthys_stop
  • Size 2.4MB
  • Sample260328-tpde2ag17j
  • SHA256 e7fb97547515b519014a69492faad607cfe5ff3f1fbc6cb4962fc682124be8e3
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
observerdiscoverystealer

Malware Config

Extracted

Family

  • observer

C2

  • http://5.42.64.41:1337

Targets

    • Target
      2026-03-28_afed85819bbe786d1c7ad957e4c4ad2c_elex_rhadamanthys_stop
    • Size 2.4MB
    • SHA256 e7fb97547515b519014a69492faad607cfe5ff3f1fbc6cb4962fc682124be8e3
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    discoveryobserverstealer

    • Observer

      Observer is an infostealer written in C++.

      stealerobserver

    • Observer family

      observer

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v16

Tasks