General
- Target setup.exe
- Size 339KB
- Sample230414-bb3tnafc48
- SHA256 b9ad234abeb1490f2c2d28dd2387f0575ba5128ebb799741b1f3179622204175
- MD5 5daf34c3c86969f1d9caa5876cb3a5e9
- SHA1 6e8d662be02470d57d1007ffc8857779232c9d4d
- SHA512 45119da070300d5009b5b910760ad1e72912e38e07148e53e6d8dd5270026344789f786b153e9d16f0d34f89032a6bc54643434465d8a2ea956ada28094fa5c1
- SSDEEP 3072:y4j6wHa1Iz2xFchEb8+cxcl2XEaQQQLtsiwOV8osCNqe1F2CDQMQRkeVL8sLNt/5:0g/hEba6sluLtRJPse1E1RkeVYsv3y
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
setup.exe
Resource
win7-20230220-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
setup.exe
Resource
win10v2004-20230220-en
9 signatures
150 seconds
Malware Config
Extracted
Family
-
rhadamanthys
C2
-
http://179.43.142.201/img/favicon.png
Targets
-
- Target setup.exe
- Size 339KB
- SHA256 b9ad234abeb1490f2c2d28dd2387f0575ba5128ebb799741b1f3179622204175
- MD5 5daf34c3c86969f1d9caa5876cb3a5e9
- SHA1 6e8d662be02470d57d1007ffc8857779232c9d4d
- SHA512 45119da070300d5009b5b910760ad1e72912e38e07148e53e6d8dd5270026344789f786b153e9d16f0d34f89032a6bc54643434465d8a2ea956ada28094fa5c1
- SSDEEP 3072:y4j6wHa1Iz2xFchEb8+cxcl2XEaQQQLtsiwOV8osCNqe1F2CDQMQRkeVL8sLNt/5:0g/hEba6sluLtRJPse1E1RkeVYsv3y
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Detect rhadamanthys stealer shellcode
-
Rhadamanthys
Rhadamanthys is an info stealer written in C++ first seen in August 2022.
-
Accesses Microsoft Outlook profiles