Overview

overview

10

Static

static

3

cd3d92dbd7...7a.exe

windows7-x64

10

cd3d92dbd7...7a.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    cd3d92dbd70a75818d00e41fd4f0a8bb345de3ab29cd93de1057a057516fbd7a.bin

  • Size

    278KB

  • Sample

    230501-w3t12sch47

  • MD5

    251f02872b82f32690de58d94c88791f

  • SHA1

    76418662b6f48755954f69485dc9b8c80160e9bb

  • SHA256

    cd3d92dbd70a75818d00e41fd4f0a8bb345de3ab29cd93de1057a057516fbd7a

  • SHA512

    2e84710ef2ff86987d5a0a3089c4c53fb00f71c2cec66385ce8e6f1c908c4d8f7c8744a9d233a5eb56d92c02a2a4d1943b74ee2af8aa943323d6af12a32db151

  • SSDEEP

    6144:kdvdMGCki9AZrvR4iExGwAGXK77BS1LpP0JX:kdvu3kiOxZ4PxGwxWlSwx

Score
10/10
rhadamanthysstealer

Malware Config

Extracted

Family

rhadamanthys

C2

http://179.43.142.201/img/favicon.png

Targets

    • Target

      cd3d92dbd70a75818d00e41fd4f0a8bb345de3ab29cd93de1057a057516fbd7a.bin

    • Size

      278KB

    • MD5

      251f02872b82f32690de58d94c88791f

    • SHA1

      76418662b6f48755954f69485dc9b8c80160e9bb

    • SHA256

      cd3d92dbd70a75818d00e41fd4f0a8bb345de3ab29cd93de1057a057516fbd7a

    • SHA512

      2e84710ef2ff86987d5a0a3089c4c53fb00f71c2cec66385ce8e6f1c908c4d8f7c8744a9d233a5eb56d92c02a2a4d1943b74ee2af8aa943323d6af12a32db151

    • SSDEEP

      6144:kdvdMGCki9AZrvR4iExGwAGXK77BS1LpP0JX:kdvu3kiOxZ4PxGwxWlSwx

    Score
    10/10
    rhadamanthysstealer

    • Detect rhadamanthys stealer shellcode

    • Rhadamanthys

      Rhadamanthys is an info stealer written in C++ first seen in August 2022.

      stealerrhadamanthys
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks