General

  • Target

    d668246d8d9414c778f83f8f15d2ad68849c4b736d0cf65e126ffc7a7a27377f.bin

  • Size

    410KB

  • Sample

    230501-xalpmsdd65

  • MD5

    151fb5d2362e854d6b2cf87a31fdd101

  • SHA1

    12e1f114ddfc567c2718a7283f09f2b5291faf88

  • SHA256

    d668246d8d9414c778f83f8f15d2ad68849c4b736d0cf65e126ffc7a7a27377f

  • SHA512

    ca7b106393c63b202505c10695fed8330060613cf0c62a7b3dc819fd95af4464609a85e2af3cadf1314a917f65de02fbcd81a991100d67e9a1e0bfa8e885c622

  • SSDEEP

    6144:eB/LoBCFoHjL5xRPpe31K1UyuWkHOM8gOh9qLiGPfqb:eB/cBCFoD9zxe3k1UyuWkHOdaGGPo

Score
10/10

Malware Config

Extracted

Family

rhadamanthys

C2

http://179.43.142.201/img/favicon.png

Targets

    • Target

      d668246d8d9414c778f83f8f15d2ad68849c4b736d0cf65e126ffc7a7a27377f.bin

    • Size

      410KB

    • MD5

      151fb5d2362e854d6b2cf87a31fdd101

    • SHA1

      12e1f114ddfc567c2718a7283f09f2b5291faf88

    • SHA256

      d668246d8d9414c778f83f8f15d2ad68849c4b736d0cf65e126ffc7a7a27377f

    • SHA512

      ca7b106393c63b202505c10695fed8330060613cf0c62a7b3dc819fd95af4464609a85e2af3cadf1314a917f65de02fbcd81a991100d67e9a1e0bfa8e885c622

    • SSDEEP

      6144:eB/LoBCFoHjL5xRPpe31K1UyuWkHOM8gOh9qLiGPfqb:eB/cBCFoD9zxe3k1UyuWkHOdaGGPo

    Score
    10/10
    • Detect rhadamanthys stealer shellcode

    • Rhadamanthys

      Rhadamanthys is an info stealer written in C++ first seen in August 2022.

MITRE ATT&CK Matrix

Tasks