General
-
Target
c5324d553a48a1021668815a38f70a671a666d08de3e9193c3ef9c4c6072b890
-
Size
419KB
-
Sample
230416-g9t73aag8y
-
MD5
e62e0d27d5350b5178e3aac27e07d23c
-
SHA1
cae0a3b87b0d25cf325bce53e8d23ee4b77bd775
-
SHA256
c5324d553a48a1021668815a38f70a671a666d08de3e9193c3ef9c4c6072b890
-
SHA512
4ff1cc4f15bee7ebdf2d9906ac0af2b742470888791594a9ba9a20ef70ebd5da0d560451f5cf29f6af6bcee0398cb7053c49bf3c8e2db4514f24ff1031e85630
-
SSDEEP
6144:9WKkQnV8rsrNKiq7umyNRhAzRnSUDsEX/t0vepBY4Xmbe4:9WFQV5rNKiqSm2o+QBYCmq4
Static task
static1
Behavioral task
behavioral1
Sample
c5324d553a48a1021668815a38f70a671a666d08de3e9193c3ef9c4c6072b890.exe
Resource
win10-20230220-en
Malware Config
Extracted
rhadamanthys
http://179.43.142.201/img/favicon.png
Targets
-
-
Target
c5324d553a48a1021668815a38f70a671a666d08de3e9193c3ef9c4c6072b890
-
Size
419KB
-
MD5
e62e0d27d5350b5178e3aac27e07d23c
-
SHA1
cae0a3b87b0d25cf325bce53e8d23ee4b77bd775
-
SHA256
c5324d553a48a1021668815a38f70a671a666d08de3e9193c3ef9c4c6072b890
-
SHA512
4ff1cc4f15bee7ebdf2d9906ac0af2b742470888791594a9ba9a20ef70ebd5da0d560451f5cf29f6af6bcee0398cb7053c49bf3c8e2db4514f24ff1031e85630
-
SSDEEP
6144:9WKkQnV8rsrNKiq7umyNRhAzRnSUDsEX/t0vepBY4Xmbe4:9WFQV5rNKiqSm2o+QBYCmq4
Score10/10-
Detect rhadamanthys stealer shellcode
-
Rhadamanthys
Rhadamanthys is an info stealer written in C++ first seen in August 2022.
-
Accesses Microsoft Outlook profiles
-