General

  • Target

    c5ca92af684259dd0453f2b0ff6794b6.exe.bin

  • Size

    290KB

  • Sample

    230501-wx88saea6w

  • MD5

    c5ca92af684259dd0453f2b0ff6794b6

  • SHA1

    9da7fae5bafc183315a80a876d1be6b6ed2b0781

  • SHA256

    c2a74ffd7c6ed65521022f799b4451e512fef20d6ded6a609616b501dd8bd56e

  • SHA512

    4348c85b8d0b97e7b8713f97e1535a66bb706e47e11c7e9d409ccaa0cc5fe3082191d3b072348d67e468b6269bc0d469fde40b341b1f293c096bf5b4f9839d39

  • SSDEEP

    3072:EYXeLHrLzvjj8eyx8NkiSzrcgBEgfDuvdU9dzOaqhfXDYVhPUeTN9VXrFEBK4V3b:JwjYL8dSzfUaUhbYV1UeTPjgL3oH

Score
10/10

Malware Config

Extracted

Family

rhadamanthys

C2

http://179.43.142.201/img/favicon.png

Targets

    • Target

      c5ca92af684259dd0453f2b0ff6794b6.exe.bin

    • Size

      290KB

    • MD5

      c5ca92af684259dd0453f2b0ff6794b6

    • SHA1

      9da7fae5bafc183315a80a876d1be6b6ed2b0781

    • SHA256

      c2a74ffd7c6ed65521022f799b4451e512fef20d6ded6a609616b501dd8bd56e

    • SHA512

      4348c85b8d0b97e7b8713f97e1535a66bb706e47e11c7e9d409ccaa0cc5fe3082191d3b072348d67e468b6269bc0d469fde40b341b1f293c096bf5b4f9839d39

    • SSDEEP

      3072:EYXeLHrLzvjj8eyx8NkiSzrcgBEgfDuvdU9dzOaqhfXDYVhPUeTN9VXrFEBK4V3b:JwjYL8dSzfUaUhbYV1UeTPjgL3oH

    Score
    10/10
    • Detect rhadamanthys stealer shellcode

    • Rhadamanthys

      Rhadamanthys is an info stealer written in C++ first seen in August 2022.

MITRE ATT&CK Matrix

Tasks