General
- Target 6751e2d1c8d45dd2367b808fa8735262.exe
- Size 398KB
- Sample230428-m9qsjafe5x
- SHA256 9d137028d8a2aceaa94662fb71620762bdc9780ceebf7122c307644db186e9fe
- MD5 6751e2d1c8d45dd2367b808fa8735262
- SHA1 ec27978be7338ca691686c5fadd6dc2a168b55df
- SHA512 8fc6a385259a5e621235eab63f8098b2832b2402a72bc1336ec66f3cba80bb31123f06202647a8fbe133d09e8b7500723bee8d3ee9e1bdcc08bf2cd8879b25be
- SSDEEP 6144:s42E+hZqmFutSgeldahSiuy0gnmgxJeOkHx4dlzuSQIhDRX:B2ZzqmFuUPfaI1AmgxJe56dlzf1DRX
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
6751e2d1c8d45dd2367b808fa8735262.exe
Resource
win7-20230220-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
6751e2d1c8d45dd2367b808fa8735262.exe
Resource
win10v2004-20230221-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
rhadamanthys
C2
-
http://179.43.142.201/img/favicon.png
Targets
-
- Target 6751e2d1c8d45dd2367b808fa8735262.exe
- Size 398KB
- SHA256 9d137028d8a2aceaa94662fb71620762bdc9780ceebf7122c307644db186e9fe
- MD5 6751e2d1c8d45dd2367b808fa8735262
- SHA1 ec27978be7338ca691686c5fadd6dc2a168b55df
- SHA512 8fc6a385259a5e621235eab63f8098b2832b2402a72bc1336ec66f3cba80bb31123f06202647a8fbe133d09e8b7500723bee8d3ee9e1bdcc08bf2cd8879b25be
- SSDEEP 6144:s42E+hZqmFutSgeldahSiuy0gnmgxJeOkHx4dlzuSQIhDRX:B2ZzqmFuUPfaI1AmgxJe56dlzf1DRX
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Detect rhadamanthys stealer shellcode
-
Rhadamanthys
Rhadamanthys is an info stealer written in C++ first seen in August 2022.