General
- Target 60de8bdb2a6664035303aa070639569e.exe
- Size 423KB
- Sample230418-tfmmcaec5x
- SHA256 9e28586ab70b1abdccfe087d81e326a0703f75e9551ced187d37c51130ad02f5
- MD5 60de8bdb2a6664035303aa070639569e
- SHA1 3579d2cc4d9ef28953a62ffecd331f955e7bf783
- SHA512 bb6e262f10b3bad04d16857ba949f9a4acb468808ff8e19a6344521ec4e5e7ef993bfb931f7e2d731a3db2383720f0c533d027ab712959595bbb0fa2f9cebda8
- SSDEEP 6144:wRZY1s8KffUHDK9AbETusTTFW2hv00deZb63IXDnDD2LAMIv:wfcsbfeDKzTHTFxcdtdze0nv
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
60de8bdb2a6664035303aa070639569e.exe
Resource
win7-20230220-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
60de8bdb2a6664035303aa070639569e.exe
Resource
win10v2004-20230220-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
rhadamanthys
C2
-
http://179.43.142.201/img/favicon.png
Targets
-
- Target 60de8bdb2a6664035303aa070639569e.exe
- Size 423KB
- SHA256 9e28586ab70b1abdccfe087d81e326a0703f75e9551ced187d37c51130ad02f5
- MD5 60de8bdb2a6664035303aa070639569e
- SHA1 3579d2cc4d9ef28953a62ffecd331f955e7bf783
- SHA512 bb6e262f10b3bad04d16857ba949f9a4acb468808ff8e19a6344521ec4e5e7ef993bfb931f7e2d731a3db2383720f0c533d027ab712959595bbb0fa2f9cebda8
- SSDEEP 6144:wRZY1s8KffUHDK9AbETusTTFW2hv00deZb63IXDnDD2LAMIv:wfcsbfeDKzTHTFxcdtdze0nv
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Detect rhadamanthys stealer shellcode
-
Rhadamanthys
Rhadamanthys is an info stealer written in C++ first seen in August 2022.