General
-
Target
570735feb7b69d084c2ce38114f43f5134e4eadfa727e95c1a466cd6ef5a82a0
-
Size
298KB
-
Sample
230419-z1zqasdd97
-
MD5
11bf9926ee719c1cb2283a028833d577
-
SHA1
676040a478027bb82a5ea76ef45913acc057dd70
-
SHA256
570735feb7b69d084c2ce38114f43f5134e4eadfa727e95c1a466cd6ef5a82a0
-
SHA512
6687780cc77ebe6128d02ec61c9a564a06b92866f4a42d0293bb418b473e7541adc18191d1941c723fcb0d1bf3c16e6ea85748acbfa45ecc3681e7dd8aa3f743
-
SSDEEP
6144:Ra4q8r+PnDhWFGsWNd00W+PIyUlLVutg4/ve:RXNr+PnDAIskW+PpUlS
Static task
static1
Behavioral task
behavioral1
Sample
570735feb7b69d084c2ce38114f43f5134e4eadfa727e95c1a466cd6ef5a82a0.exe
Resource
win10v2004-20230220-en
Malware Config
Extracted
rhadamanthys
http://179.43.142.201/img/favicon.png
Targets
-
-
Target
570735feb7b69d084c2ce38114f43f5134e4eadfa727e95c1a466cd6ef5a82a0
-
Size
298KB
-
MD5
11bf9926ee719c1cb2283a028833d577
-
SHA1
676040a478027bb82a5ea76ef45913acc057dd70
-
SHA256
570735feb7b69d084c2ce38114f43f5134e4eadfa727e95c1a466cd6ef5a82a0
-
SHA512
6687780cc77ebe6128d02ec61c9a564a06b92866f4a42d0293bb418b473e7541adc18191d1941c723fcb0d1bf3c16e6ea85748acbfa45ecc3681e7dd8aa3f743
-
SSDEEP
6144:Ra4q8r+PnDhWFGsWNd00W+PIyUlLVutg4/ve:RXNr+PnDAIskW+PpUlS
Score10/10-
Detect rhadamanthys stealer shellcode
-
Rhadamanthys
Rhadamanthys is an info stealer written in C++ first seen in August 2022.
-
Accesses Microsoft Outlook profiles
-