General

  • Target

    3920e11f9c6e2a55530b246fa6c80a6b04ba91422156790c3a9a3882b17e0e26.bin

  • Size

    277KB

  • Sample

    230501-tma7wsdd51

  • MD5

    862e34373ed310a088f12faa52e2e977

  • SHA1

    877421e26900ae5af693e79962d2de997bf4a0d4

  • SHA256

    3920e11f9c6e2a55530b246fa6c80a6b04ba91422156790c3a9a3882b17e0e26

  • SHA512

    6276e0c5d2221f5d2ca360975aa86b9efbd9eddb685368f994e411346e4132c89e7ccda6cb129486a59730ad36bbd70af7379a592af2553ab22c1b04fb1c9cdb

  • SSDEEP

    3072:YWoZ+DRitRsoGLwD4OGEpxQyuPtt7kKkVBn9DlRlh3PPNM2uPoBiaa5yI:u+85oOGeQnPfyB9fj3NM2ooBiaBI

Score
10/10

Malware Config

Extracted

Family

rhadamanthys

C2

http://179.43.142.201/img/favicon.png

Targets

    • Target

      3920e11f9c6e2a55530b246fa6c80a6b04ba91422156790c3a9a3882b17e0e26.bin

    • Size

      277KB

    • MD5

      862e34373ed310a088f12faa52e2e977

    • SHA1

      877421e26900ae5af693e79962d2de997bf4a0d4

    • SHA256

      3920e11f9c6e2a55530b246fa6c80a6b04ba91422156790c3a9a3882b17e0e26

    • SHA512

      6276e0c5d2221f5d2ca360975aa86b9efbd9eddb685368f994e411346e4132c89e7ccda6cb129486a59730ad36bbd70af7379a592af2553ab22c1b04fb1c9cdb

    • SSDEEP

      3072:YWoZ+DRitRsoGLwD4OGEpxQyuPtt7kKkVBn9DlRlh3PPNM2uPoBiaa5yI:u+85oOGeQnPfyB9fj3NM2ooBiaBI

    Score
    10/10
    • Detect rhadamanthys stealer shellcode

    • Rhadamanthys

      Rhadamanthys is an info stealer written in C++ first seen in August 2022.

MITRE ATT&CK Matrix

Tasks