General
-
Target
setup.exe
-
Size
423KB
-
Sample
230419-bl84esfd63
-
MD5
e29bff52843372f6c9687b62c72bd929
-
SHA1
6f5aaf919f32db47977ae5fbd1b1eb60e679770a
-
SHA256
3d7566812366cea0ea926397e36f469b1b8ff5abd26fa0841dbecfbc7691530e
-
SHA512
003aa38ca1261c8a6e83305dbe510bcb1aa4b4f31b1b559f6357f20bdcf75cfce83c3055888cf177befd642e17eac54a5b95c9e15c7232253c9d883a5edac018
-
SSDEEP
6144:Hrwq1lCWWccnucf6JlN7/XZ3e/2ZI+obAzTIH0tnB+bi0y9Iv:HrflzWtu66JDrZq+okzTsYnBq5yuv
Static task
static1
Behavioral task
behavioral1
Sample
setup.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
setup.exe
Resource
win10v2004-20230220-en
Malware Config
Extracted
rhadamanthys
http://179.43.142.201/img/favicon.png
Targets
-
-
Target
setup.exe
-
Size
423KB
-
MD5
e29bff52843372f6c9687b62c72bd929
-
SHA1
6f5aaf919f32db47977ae5fbd1b1eb60e679770a
-
SHA256
3d7566812366cea0ea926397e36f469b1b8ff5abd26fa0841dbecfbc7691530e
-
SHA512
003aa38ca1261c8a6e83305dbe510bcb1aa4b4f31b1b559f6357f20bdcf75cfce83c3055888cf177befd642e17eac54a5b95c9e15c7232253c9d883a5edac018
-
SSDEEP
6144:Hrwq1lCWWccnucf6JlN7/XZ3e/2ZI+obAzTIH0tnB+bi0y9Iv:HrflzWtu66JDrZq+okzTsYnBq5yuv
Score10/10-
Detect rhadamanthys stealer shellcode
-
Rhadamanthys
Rhadamanthys is an info stealer written in C++ first seen in August 2022.
-
Accesses Microsoft Outlook profiles
-