General
-
Target
5f85561b5626fc3b694eb9e3695dc3bc341ecd3969e35bd83a8ac6cc68574839
-
Size
298KB
-
Sample
230419-jjj1hsah9v
-
MD5
0e4a8946152594a1e7924210b61d592e
-
SHA1
7bb0e9bb643c905ae1cb5ccf45b78dd1f0c99317
-
SHA256
5f85561b5626fc3b694eb9e3695dc3bc341ecd3969e35bd83a8ac6cc68574839
-
SHA512
a9461c5c85968f173a228f979ef69e7f9f4dd85f25210ecd887909217585d55203c0269b35c7de74d42d78d4fd3c22ddc9a59713c47ddab7f9b458bf7a9484b3
-
SSDEEP
6144:tQO5cTrNuBGsj4kWorghriL+yCxMYPMct3YPDWJ:HGTroBZ4kWo0hRy2Jt
Static task
static1
Behavioral task
behavioral1
Sample
5f85561b5626fc3b694eb9e3695dc3bc341ecd3969e35bd83a8ac6cc68574839.exe
Resource
win10v2004-20230220-en
Malware Config
Extracted
rhadamanthys
http://179.43.142.201/img/favicon.png
Targets
-
-
Target
5f85561b5626fc3b694eb9e3695dc3bc341ecd3969e35bd83a8ac6cc68574839
-
Size
298KB
-
MD5
0e4a8946152594a1e7924210b61d592e
-
SHA1
7bb0e9bb643c905ae1cb5ccf45b78dd1f0c99317
-
SHA256
5f85561b5626fc3b694eb9e3695dc3bc341ecd3969e35bd83a8ac6cc68574839
-
SHA512
a9461c5c85968f173a228f979ef69e7f9f4dd85f25210ecd887909217585d55203c0269b35c7de74d42d78d4fd3c22ddc9a59713c47ddab7f9b458bf7a9484b3
-
SSDEEP
6144:tQO5cTrNuBGsj4kWorghriL+yCxMYPMct3YPDWJ:HGTroBZ4kWo0hRy2Jt
Score10/10-
Detect rhadamanthys stealer shellcode
-
Rhadamanthys
Rhadamanthys is an info stealer written in C++ first seen in August 2022.
-
Accesses Microsoft Outlook profiles
-