Overview

overview

10

Static

static

3

cd3d92dbd7...7a.exe

windows7-x64

10

cd3d92dbd7...7a.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    251f02872b82f32690de58d94c88791f.bin.bin

  • Size

    200KB

  • Sample

    230430-28rqrsae2y

  • MD5

    c61dea3a8e8040d289a443a81d2a4010

  • SHA1

    8d5c2b42879d5081bd93d965282bc7dcffdb9f71

  • SHA256

    922c7318a05335b7f6ec93a8a937b20c02480afd0ba22e61eb92e2a8afd28d2b

  • SHA512

    91bdcc8ba9cc1af5be19a67b4d170e2c69da14d0a5feb1db10f100082fa0df3adc79b3651f0b101bd4dd2d81f9b341dca634b9be34507c74481e3e27cedfc686

  • SSDEEP

    3072:rnxzDXLFEF7UG4UM4IL4thu8GKz2KZ6cmyOF1uiCj5LJ8MtZ8n8pV5MlMT10MfLr:rnxzKr4UM4GEz9FLJztZ8WHMgS8r

Score
10/10
rhadamanthysstealer

Malware Config

Extracted

Family

rhadamanthys

C2

http://179.43.142.201/img/favicon.png

Targets

    • Target

      cd3d92dbd70a75818d00e41fd4f0a8bb345de3ab29cd93de1057a057516fbd7a.exe

    • Size

      278KB

    • MD5

      251f02872b82f32690de58d94c88791f

    • SHA1

      76418662b6f48755954f69485dc9b8c80160e9bb

    • SHA256

      cd3d92dbd70a75818d00e41fd4f0a8bb345de3ab29cd93de1057a057516fbd7a

    • SHA512

      2e84710ef2ff86987d5a0a3089c4c53fb00f71c2cec66385ce8e6f1c908c4d8f7c8744a9d233a5eb56d92c02a2a4d1943b74ee2af8aa943323d6af12a32db151

    • SSDEEP

      6144:kdvdMGCki9AZrvR4iExGwAGXK77BS1LpP0JX:kdvu3kiOxZ4PxGwxWlSwx

    Score
    10/10
    rhadamanthysstealer

    • Detect rhadamanthys stealer shellcode

    • Rhadamanthys

      Rhadamanthys is an info stealer written in C++ first seen in August 2022.

      stealerrhadamanthys
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks