General
-
Target
3dc8286613e87fae3dcabd5ce0f048ec38bdd2da89848da3c9513ea96b292204
-
Size
419KB
-
Sample
230416-czv96aab7w
-
MD5
3290f04134c6cca11be6274a7b2bf0f9
-
SHA1
ed958b562799268ab752201274fea16fd7b2cce3
-
SHA256
3dc8286613e87fae3dcabd5ce0f048ec38bdd2da89848da3c9513ea96b292204
-
SHA512
4438bd3ce5c7a70eaa0260dbdeb7028774cba592fe0ed3e565c09caf0d875cf0f3bd45a70606ab78012b44d00b3b05dbe0d28483ee0550bc1462ede86fd18b99
-
SSDEEP
12288:Zer/LyAOtAVxmhgdGXgIBECCfGTVU1KiBTTq4:ZM/2AgcmhtXgIBEnfGTVUhTG4
Static task
static1
Behavioral task
behavioral1
Sample
3dc8286613e87fae3dcabd5ce0f048ec38bdd2da89848da3c9513ea96b292204.exe
Resource
win10v2004-20230220-en
Malware Config
Extracted
rhadamanthys
http://179.43.142.201/img/favicon.png
Targets
-
-
Target
3dc8286613e87fae3dcabd5ce0f048ec38bdd2da89848da3c9513ea96b292204
-
Size
419KB
-
MD5
3290f04134c6cca11be6274a7b2bf0f9
-
SHA1
ed958b562799268ab752201274fea16fd7b2cce3
-
SHA256
3dc8286613e87fae3dcabd5ce0f048ec38bdd2da89848da3c9513ea96b292204
-
SHA512
4438bd3ce5c7a70eaa0260dbdeb7028774cba592fe0ed3e565c09caf0d875cf0f3bd45a70606ab78012b44d00b3b05dbe0d28483ee0550bc1462ede86fd18b99
-
SSDEEP
12288:Zer/LyAOtAVxmhgdGXgIBECCfGTVU1KiBTTq4:ZM/2AgcmhtXgIBEnfGTVUhTG4
Score10/10-
Detect rhadamanthys stealer shellcode
-
Rhadamanthys
Rhadamanthys is an info stealer written in C++ first seen in August 2022.
-
Accesses Microsoft Outlook profiles
-