General

  • Target

    c7bdb994f4d0f5870c0e4338d6bf623ea78d2124be96a644314048f6d8510581.bin

  • Size

    354KB

  • Sample

    230501-wy8cwace67

  • MD5

    c9945320750afb763a0757b355411bb7

  • SHA1

    9d5e454ff7b750cc8b2f272e5d8ce128b4573cb3

  • SHA256

    c7bdb994f4d0f5870c0e4338d6bf623ea78d2124be96a644314048f6d8510581

  • SHA512

    59fd4be8beea2a47f22b08ae055e30749be644da4770baa0cdf3e7fdc177f937f2035cf2678befcf1e6e9dfed92a8708f6138e5a58ae76120e22965d0382623a

  • SSDEEP

    6144:drise+j/xmoUuZi1vHSY695ZGdJwMjIydNFe1:d5j/UoH41VzesVdN

Score
10/10

Malware Config

Extracted

Family

rhadamanthys

C2

http://179.43.142.201/img/favicon.png

Targets

    • Target

      c7bdb994f4d0f5870c0e4338d6bf623ea78d2124be96a644314048f6d8510581.bin

    • Size

      354KB

    • MD5

      c9945320750afb763a0757b355411bb7

    • SHA1

      9d5e454ff7b750cc8b2f272e5d8ce128b4573cb3

    • SHA256

      c7bdb994f4d0f5870c0e4338d6bf623ea78d2124be96a644314048f6d8510581

    • SHA512

      59fd4be8beea2a47f22b08ae055e30749be644da4770baa0cdf3e7fdc177f937f2035cf2678befcf1e6e9dfed92a8708f6138e5a58ae76120e22965d0382623a

    • SSDEEP

      6144:drise+j/xmoUuZi1vHSY695ZGdJwMjIydNFe1:d5j/UoH41VzesVdN

    Score
    10/10
    • Detect rhadamanthys stealer shellcode

    • Rhadamanthys

      Rhadamanthys is an info stealer written in C++ first seen in August 2022.

MITRE ATT&CK Matrix

Tasks