Resubmissions

28/09/2026, 07:28

260928-jax6saybnb10

21/08/2026, 02:38

260821-c4t8na1eld10

General

  • Target
    2026-08-20_a6e05ea5f4f4cc52804964d8ba17af0a_amadey_cobalt-strike_coinminer_darkgate_elex_luca-stealer_lynx_njrat
  • Size 494KB
  • Sample260821-c4t8na1eld
  • SHA256 334d2d0090a607f9b35dde7b139e56419b27d992f34ddea3325c59e2d4de0b9f
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      2026-08-20_a6e05ea5f4f4cc52804964d8ba17af0a_amadey_cobalt-strike_coinminer_darkgate_elex_luca-stealer_lynx_njrat
    • Size 494KB
    • SHA256 334d2d0090a607f9b35dde7b139e56419b27d992f34ddea3325c59e2d4de0b9f
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Detects Rhadamanthys Payload

    • Family: Rhadamanthys

      Rhadamanthys is an info stealer written in C++ first seen in August 2022.

    • Suspicious use of NtCreateUserProcessOtherParentProcess

MITRE ATT&CK Enterprise v16

Tasks