General

  • Target

    c213cec16e5a68f1994f1474ef7cbcf117813a01d96f50082f89851d15d68cfc.bin

  • Size

    411KB

  • Sample

    230501-wwemsacc22

  • MD5

    8795be4bc6815abd736cb2256e22eaa3

  • SHA1

    9638feb0436cec3f9f364d6d13c337bdb69fa75d

  • SHA256

    c213cec16e5a68f1994f1474ef7cbcf117813a01d96f50082f89851d15d68cfc

  • SHA512

    d9556b3faf0dd58041e0781e6bd7b5d7d399d864bf156763ac331639abade56e0e7b7b1bea12aea7604a4c6ecf86e8ce3ceb1ada5a8a844ee04b3e2b923419a2

  • SSDEEP

    6144:1VYqMZPgYU1Kjx8Z09ypdg9GJWI8/Cr0kJOqO:1VZuPg7Ox8Dp6ArTWN

Score
10/10

Malware Config

Extracted

Family

rhadamanthys

C2

http://179.43.142.201/img/favicon.png

Targets

    • Target

      c213cec16e5a68f1994f1474ef7cbcf117813a01d96f50082f89851d15d68cfc.bin

    • Size

      411KB

    • MD5

      8795be4bc6815abd736cb2256e22eaa3

    • SHA1

      9638feb0436cec3f9f364d6d13c337bdb69fa75d

    • SHA256

      c213cec16e5a68f1994f1474ef7cbcf117813a01d96f50082f89851d15d68cfc

    • SHA512

      d9556b3faf0dd58041e0781e6bd7b5d7d399d864bf156763ac331639abade56e0e7b7b1bea12aea7604a4c6ecf86e8ce3ceb1ada5a8a844ee04b3e2b923419a2

    • SSDEEP

      6144:1VYqMZPgYU1Kjx8Z09ypdg9GJWI8/Cr0kJOqO:1VZuPg7Ox8Dp6ArTWN

    Score
    10/10
    • Detect rhadamanthys stealer shellcode

    • Rhadamanthys

      Rhadamanthys is an info stealer written in C++ first seen in August 2022.

MITRE ATT&CK Matrix

Tasks