Overview

overview

10

Static

static

3

ca4915bfa5...b1.exe

windows7-x64

10

ca4915bfa5...b1.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ca4915bfa5ef05cfa1e20ab04d46ec00a5a07e9222faac1558c1cc08e18db4b1.bin

  • Size

    285KB

  • Sample

    230501-w1etcacf85

  • MD5

    5153d11ef0248afbacc997d075ae6d06

  • SHA1

    f606a58ffda5e1109b9b1327252e3b5b953077f1

  • SHA256

    ca4915bfa5ef05cfa1e20ab04d46ec00a5a07e9222faac1558c1cc08e18db4b1

  • SHA512

    f67cd8a5cae93e3537e5cfe4f83fc86279fc074bc0c8f2209c3fb285ef4bdc04acd6979dc408cbaa46be0212d825199795f0801a9d8be282fb4d67b5c6c67ac5

  • SSDEEP

    6144:U5JqcFWo41CyHlQoO5JEDYgkN39tQqlykT:eJlwvCyHlQ5uud9tQqoM

Score
10/10
rhadamanthysstealer

Malware Config

Extracted

Family

rhadamanthys

C2

http://179.43.142.201/img/favicon.png

Targets

    • Target

      ca4915bfa5ef05cfa1e20ab04d46ec00a5a07e9222faac1558c1cc08e18db4b1.bin

    • Size

      285KB

    • MD5

      5153d11ef0248afbacc997d075ae6d06

    • SHA1

      f606a58ffda5e1109b9b1327252e3b5b953077f1

    • SHA256

      ca4915bfa5ef05cfa1e20ab04d46ec00a5a07e9222faac1558c1cc08e18db4b1

    • SHA512

      f67cd8a5cae93e3537e5cfe4f83fc86279fc074bc0c8f2209c3fb285ef4bdc04acd6979dc408cbaa46be0212d825199795f0801a9d8be282fb4d67b5c6c67ac5

    • SSDEEP

      6144:U5JqcFWo41CyHlQoO5JEDYgkN39tQqlykT:eJlwvCyHlQ5uud9tQqoM

    Score
    10/10
    rhadamanthysstealer

    • Detect rhadamanthys stealer shellcode

    • Rhadamanthys

      Rhadamanthys is an info stealer written in C++ first seen in August 2022.

      stealerrhadamanthys
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks