Overview

overview

10

Static

static

3

2bbc4f8f61...bf.exe

windows7-x64

10

2bbc4f8f61...bf.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2bbc4f8f611a0b679159f7220648cca990635e9b1d9aff175bc586985dc8dcbf.bin

  • Size

    278KB

  • Sample

    230430-3ckg9ahc92

  • MD5

    81d4b5e6643365732d35fab75d24b058

  • SHA1

    a7161dd19a31d3bd5770ec518cd59d4de19983c6

  • SHA256

    2bbc4f8f611a0b679159f7220648cca990635e9b1d9aff175bc586985dc8dcbf

  • SHA512

    05267d2523ff70e9c3ff7ed91672ed940087f8724e5a4cb6ce6c0140fdc567f3938320e521bae20963f71201a44db92ad627a1205eb69a662f6c12544ac26ed5

  • SSDEEP

    6144:S79Lf9LYCemcHQNlwmqOKMmzQzbZNXHav:S79zdAyhqny/XHe

Score
10/10
rhadamanthysstealer

Malware Config

Extracted

Family

rhadamanthys

C2

http://179.43.142.201/img/favicon.png

Targets

    • Target

      2bbc4f8f611a0b679159f7220648cca990635e9b1d9aff175bc586985dc8dcbf.bin

    • Size

      278KB

    • MD5

      81d4b5e6643365732d35fab75d24b058

    • SHA1

      a7161dd19a31d3bd5770ec518cd59d4de19983c6

    • SHA256

      2bbc4f8f611a0b679159f7220648cca990635e9b1d9aff175bc586985dc8dcbf

    • SHA512

      05267d2523ff70e9c3ff7ed91672ed940087f8724e5a4cb6ce6c0140fdc567f3938320e521bae20963f71201a44db92ad627a1205eb69a662f6c12544ac26ed5

    • SSDEEP

      6144:S79Lf9LYCemcHQNlwmqOKMmzQzbZNXHav:S79zdAyhqny/XHe

    Score
    10/10
    rhadamanthysstealer

    • Detect rhadamanthys stealer shellcode

    • Rhadamanthys

      Rhadamanthys is an info stealer written in C++ first seen in August 2022.

      stealerrhadamanthys
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks