General
- Target 05449538e49687a3ab632007f213fafa5287be8171e3253a3193f3303afc7c63.bin
- Size 398KB
- Sample230501-scshragc45
- SHA256 05449538e49687a3ab632007f213fafa5287be8171e3253a3193f3303afc7c63
- MD5 865775fb1ba609a625026298ce4f063d
- SHA1 0b8631bba75db4154ef96cfdd8bde43b8dff2ddb
- SHA512 974b2d40e2357d0aef8033d013bef1866c2304b91a70fdf45f8121847ce3604fb66d4faa3912defb875cb21f29d22494843a8b5ef60e63dba8baa9274b174cde
- SSDEEP 6144:VQKEUG73PLTfEyi0DCSLYdb7gxeNwpAFjYELbn2qK:VQjD3PLTfEydDDLYdnPNwpGkELb+
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
05449538e49687a3ab632007f213fafa5287be8171e3253a3193f3303afc7c63.exe
Resource
win7-20230220-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
05449538e49687a3ab632007f213fafa5287be8171e3253a3193f3303afc7c63.exe
Resource
win10v2004-20230220-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
rhadamanthys
C2
-
http://179.43.142.201/img/favicon.png
Targets
-
- Target 05449538e49687a3ab632007f213fafa5287be8171e3253a3193f3303afc7c63.bin
- Size 398KB
- SHA256 05449538e49687a3ab632007f213fafa5287be8171e3253a3193f3303afc7c63
- MD5 865775fb1ba609a625026298ce4f063d
- SHA1 0b8631bba75db4154ef96cfdd8bde43b8dff2ddb
- SHA512 974b2d40e2357d0aef8033d013bef1866c2304b91a70fdf45f8121847ce3604fb66d4faa3912defb875cb21f29d22494843a8b5ef60e63dba8baa9274b174cde
- SSDEEP 6144:VQKEUG73PLTfEyi0DCSLYdb7gxeNwpAFjYELbn2qK:VQjD3PLTfEydDDLYdnPNwpGkELb+
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Detect rhadamanthys stealer shellcode
-
Rhadamanthys
Rhadamanthys is an info stealer written in C++ first seen in August 2022.