General
- Target 661ae25c0714cc7d2bbc3988fa27317a1971804d3d91f06685b0d19c4b0e6399.bin
- Size 278KB
- Sample230501-vb5sssed96
- SHA256 661ae25c0714cc7d2bbc3988fa27317a1971804d3d91f06685b0d19c4b0e6399
- MD5 a55f9f9e6842e250847a2c4c5737812f
- SHA1 48eeb359fc1fb9daf72139b87b8eb62b3e09f7e8
- SHA512 66404fa5c4ab1ba7c6e6bfe764e10d1a2870b07d5197bb264e5554a67cbbe980733c93fb2da6ef6a33161970dc5848c2103869feccf9ab56fdde4d65e34aa7cb
- SSDEEP 3072:fYGXs9oxpmul5LNE8NA88LI78UFfolZMDHNIJ7gcv4SaREevMqM0Z9MB5YydGSJ1:bbxEQcY8UxoqHGJ9yREkMf0EGSJxPdE
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
661ae25c0714cc7d2bbc3988fa27317a1971804d3d91f06685b0d19c4b0e6399.exe
Resource
win7-20230220-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
661ae25c0714cc7d2bbc3988fa27317a1971804d3d91f06685b0d19c4b0e6399.exe
Resource
win10v2004-20230221-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
rhadamanthys
C2
-
http://179.43.142.201/img/favicon.png
Targets
-
- Target 661ae25c0714cc7d2bbc3988fa27317a1971804d3d91f06685b0d19c4b0e6399.bin
- Size 278KB
- SHA256 661ae25c0714cc7d2bbc3988fa27317a1971804d3d91f06685b0d19c4b0e6399
- MD5 a55f9f9e6842e250847a2c4c5737812f
- SHA1 48eeb359fc1fb9daf72139b87b8eb62b3e09f7e8
- SHA512 66404fa5c4ab1ba7c6e6bfe764e10d1a2870b07d5197bb264e5554a67cbbe980733c93fb2da6ef6a33161970dc5848c2103869feccf9ab56fdde4d65e34aa7cb
- SSDEEP 3072:fYGXs9oxpmul5LNE8NA88LI78UFfolZMDHNIJ7gcv4SaREevMqM0Z9MB5YydGSJ1:bbxEQcY8UxoqHGJ9yREkMf0EGSJxPdE
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Detect rhadamanthys stealer shellcode
-
Rhadamanthys
Rhadamanthys is an info stealer written in C++ first seen in August 2022.