General
-
Target
37a4853a99035a88e872fbbbd8c7c6969cc4d683f62a55666590e192589c0865
-
Size
412KB
-
Sample
230421-b32exafd5w
-
MD5
d952bd55c6504f57fa231f0606fdebc7
-
SHA1
1d865ea67d038501baee6611c0cb6f8fba5ce77d
-
SHA256
37a4853a99035a88e872fbbbd8c7c6969cc4d683f62a55666590e192589c0865
-
SHA512
eb719116fc01dff28c732ea96ff45aa0080869afca2d3f9fd276fd9ea9ebab5ca8884c622dcb8125d1faf39ad880c2d221d0b91f3be54559a7b8f9e99ce719b2
-
SSDEEP
6144:o8cSzJnqALyTfaPJcZN5ZFayz83EttJQzGyA4LfwggUzT+Qf7co/9r2i:oudqAEfw+ZPzaU80ttJgzLBWQDd/9r1
Static task
static1
Behavioral task
behavioral1
Sample
37a4853a99035a88e872fbbbd8c7c6969cc4d683f62a55666590e192589c0865.exe
Resource
win10v2004-20230221-en
Malware Config
Extracted
rhadamanthys
http://179.43.142.201/img/favicon.png
Targets
-
-
Target
37a4853a99035a88e872fbbbd8c7c6969cc4d683f62a55666590e192589c0865
-
Size
412KB
-
MD5
d952bd55c6504f57fa231f0606fdebc7
-
SHA1
1d865ea67d038501baee6611c0cb6f8fba5ce77d
-
SHA256
37a4853a99035a88e872fbbbd8c7c6969cc4d683f62a55666590e192589c0865
-
SHA512
eb719116fc01dff28c732ea96ff45aa0080869afca2d3f9fd276fd9ea9ebab5ca8884c622dcb8125d1faf39ad880c2d221d0b91f3be54559a7b8f9e99ce719b2
-
SSDEEP
6144:o8cSzJnqALyTfaPJcZN5ZFayz83EttJQzGyA4LfwggUzT+Qf7co/9r2i:oudqAEfw+ZPzaU80ttJgzLBWQDd/9r1
Score10/10-
Detect rhadamanthys stealer shellcode
-
Rhadamanthys
Rhadamanthys is an info stealer written in C++ first seen in August 2022.
-
Accesses Microsoft Outlook profiles
-