General

  • Target

    6e7abcb74c0cd308f361f27e4fba5d69d6a048f74aa69811e2a5a9ecb89ba5a4.bin

  • Size

    375KB

  • Sample

    230501-vf67eseh94

  • MD5

    9a2338e74600c7a571d468b2faa00662

  • SHA1

    4573ecbb2c7ac1b6b22ac7263e7dfc8228e6eca7

  • SHA256

    6e7abcb74c0cd308f361f27e4fba5d69d6a048f74aa69811e2a5a9ecb89ba5a4

  • SHA512

    e1aaf4c86274d6a53025e80f846ad86c23a821b8f58f4e7388629fa8bb328cd38b21768442484c0327dc59ad27206681c176c84766ae6068b085bfccd00e698f

  • SSDEEP

    6144:5pHzloxjpRn1UbKgSWfirRax2cp6ynut5rZisJ:5pTloxjpR1U+gqIm2

Score
10/10

Malware Config

Extracted

Family

rhadamanthys

C2

http://179.43.142.201/img/favicon.png

Targets

    • Target

      6e7abcb74c0cd308f361f27e4fba5d69d6a048f74aa69811e2a5a9ecb89ba5a4.bin

    • Size

      375KB

    • MD5

      9a2338e74600c7a571d468b2faa00662

    • SHA1

      4573ecbb2c7ac1b6b22ac7263e7dfc8228e6eca7

    • SHA256

      6e7abcb74c0cd308f361f27e4fba5d69d6a048f74aa69811e2a5a9ecb89ba5a4

    • SHA512

      e1aaf4c86274d6a53025e80f846ad86c23a821b8f58f4e7388629fa8bb328cd38b21768442484c0327dc59ad27206681c176c84766ae6068b085bfccd00e698f

    • SSDEEP

      6144:5pHzloxjpRn1UbKgSWfirRax2cp6ynut5rZisJ:5pTloxjpR1U+gqIm2

    Score
    10/10
    • Detect rhadamanthys stealer shellcode

    • Rhadamanthys

      Rhadamanthys is an info stealer written in C++ first seen in August 2022.

MITRE ATT&CK Matrix

Tasks