General

  • Target

    39aeb74d2b87aa99bfd4e7edd09b5184b88fcbb7db54a15fc655f2b12aab69e3.bin

  • Size

    410KB

  • Sample

    230430-3l63lsbf81

  • MD5

    3a5846349c57f19ee18096b0cf135c6e

  • SHA1

    616c65135130880c9d38ac0d2d7b40eb0fe8272c

  • SHA256

    39aeb74d2b87aa99bfd4e7edd09b5184b88fcbb7db54a15fc655f2b12aab69e3

  • SHA512

    df9036fb293833e485253100d3177f75ae87b5c0d4c3c0e2f63a90dc1f2dd50fcfcb4d5af86dd995381c39520d5928e7c018305b124cdf63cf1df73a8c0b7a2e

  • SSDEEP

    12288:l57N4oCBxA7lyP4J+zzZl+5t9utF8EkWihrnj7:lxaoCBhP4czZl+MtFNsj7

Score
10/10

Malware Config

Extracted

Family

rhadamanthys

C2

http://179.43.142.201/img/favicon.png

Targets

    • Target

      39aeb74d2b87aa99bfd4e7edd09b5184b88fcbb7db54a15fc655f2b12aab69e3.bin

    • Size

      410KB

    • MD5

      3a5846349c57f19ee18096b0cf135c6e

    • SHA1

      616c65135130880c9d38ac0d2d7b40eb0fe8272c

    • SHA256

      39aeb74d2b87aa99bfd4e7edd09b5184b88fcbb7db54a15fc655f2b12aab69e3

    • SHA512

      df9036fb293833e485253100d3177f75ae87b5c0d4c3c0e2f63a90dc1f2dd50fcfcb4d5af86dd995381c39520d5928e7c018305b124cdf63cf1df73a8c0b7a2e

    • SSDEEP

      12288:l57N4oCBxA7lyP4J+zzZl+5t9utF8EkWihrnj7:lxaoCBhP4czZl+MtFNsj7

    Score
    10/10
    • Detect rhadamanthys stealer shellcode

    • Rhadamanthys

      Rhadamanthys is an info stealer written in C++ first seen in August 2022.

MITRE ATT&CK Matrix

Tasks