General
- Target setup.exe
- Size 338KB
- Sample230414-bcnfcsfc54
- SHA256 c8b6d97c8058d1d7c1bbc543733d6d953d9f3a70fbf62801c7ffb76e981d72f1
- MD5 00355abe549f9e78059a3fa00114d276
- SHA1 618927127ba7a749e032dc7eb4b8ae966c661721
- SHA512 41b51d01e0326c7debe8220590bb0cf3db41ee3b28a9f7c9351049c02a8217166c158c9ddf680dfa08ce89e7efe51a0d1e05973d8d43044fcb583f795283a4fa
- SSDEEP 6144:AUmSVJ2TWrmowfMSpf06PCJUcZsbQ9kDqQ:PxJ26yRXJ0BbQ
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
setup.exe
Resource
win7-20230220-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
setup.exe
Resource
win10v2004-20230220-en
9 signatures
150 seconds
Malware Config
Extracted
Family
-
rhadamanthys
C2
-
http://179.43.142.201/img/favicon.png
Targets
-
- Target setup.exe
- Size 338KB
- SHA256 c8b6d97c8058d1d7c1bbc543733d6d953d9f3a70fbf62801c7ffb76e981d72f1
- MD5 00355abe549f9e78059a3fa00114d276
- SHA1 618927127ba7a749e032dc7eb4b8ae966c661721
- SHA512 41b51d01e0326c7debe8220590bb0cf3db41ee3b28a9f7c9351049c02a8217166c158c9ddf680dfa08ce89e7efe51a0d1e05973d8d43044fcb583f795283a4fa
- SSDEEP 6144:AUmSVJ2TWrmowfMSpf06PCJUcZsbQ9kDqQ:PxJ26yRXJ0BbQ
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Detect rhadamanthys stealer shellcode
-
Rhadamanthys
Rhadamanthys is an info stealer written in C++ first seen in August 2022.
-
Accesses Microsoft Outlook profiles