General

  • Target
    0015157c5bd151f1b5a81a07ccc54b51bf99931155c1f60cf2abaee151495a57.exe
  • Size 95.0MB
  • Sample260602-1h36faet2x
  • SHA256 0015157c5bd151f1b5a81a07ccc54b51bf99931155c1f60cf2abaee151495a57
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      0015157c5bd151f1b5a81a07ccc54b51bf99931155c1f60cf2abaee151495a57.exe
    • Size 95.0MB
    • SHA256 0015157c5bd151f1b5a81a07ccc54b51bf99931155c1f60cf2abaee151495a57
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Detects Rhadamanthys Payload

    • Family: Rhadamanthys

      Rhadamanthys is an info stealer written in C++ first seen in August 2022.

    • Executes dropped EXE

    • Loads dropped DLL

    • Enumerates processes with tasklist

    • Target
      $PLUGINSDIR/nsExec.dll
    • Size 6KB
    • SHA256 8165c7aef7de3d3e0549776535bedc380ad9be7bb85e60ad6436f71528d092af
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10

MITRE ATT&CK Enterprise v16

Tasks