General
- Target setup.exe
- Size 423KB
- Sample230419-bl84esfd63
- SHA256 3d7566812366cea0ea926397e36f469b1b8ff5abd26fa0841dbecfbc7691530e
- MD5 e29bff52843372f6c9687b62c72bd929
- SHA1 6f5aaf919f32db47977ae5fbd1b1eb60e679770a
- SHA512 003aa38ca1261c8a6e83305dbe510bcb1aa4b4f31b1b559f6357f20bdcf75cfce83c3055888cf177befd642e17eac54a5b95c9e15c7232253c9d883a5edac018
- SSDEEP 6144:Hrwq1lCWWccnucf6JlN7/XZ3e/2ZI+obAzTIH0tnB+bi0y9Iv:HrflzWtu66JDrZq+okzTsYnBq5yuv
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
setup.exe
Resource
win7-20230220-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
setup.exe
Resource
win10v2004-20230220-en
9 signatures
150 seconds
Malware Config
Extracted
Family
-
rhadamanthys
C2
-
http://179.43.142.201/img/favicon.png
Targets
-
- Target setup.exe
- Size 423KB
- SHA256 3d7566812366cea0ea926397e36f469b1b8ff5abd26fa0841dbecfbc7691530e
- MD5 e29bff52843372f6c9687b62c72bd929
- SHA1 6f5aaf919f32db47977ae5fbd1b1eb60e679770a
- SHA512 003aa38ca1261c8a6e83305dbe510bcb1aa4b4f31b1b559f6357f20bdcf75cfce83c3055888cf177befd642e17eac54a5b95c9e15c7232253c9d883a5edac018
- SSDEEP 6144:Hrwq1lCWWccnucf6JlN7/XZ3e/2ZI+obAzTIH0tnB+bi0y9Iv:HrflzWtu66JDrZq+okzTsYnBq5yuv
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Detect rhadamanthys stealer shellcode
-
Rhadamanthys
Rhadamanthys is an info stealer written in C++ first seen in August 2022.
-
Accesses Microsoft Outlook profiles