General

  • Target

    d9f2daec3b301039197a4e9bef97811f439e10be91d4bfa4c787945e7f19f9fa.bin

  • Size

    418KB

  • Sample

    230501-xccjradf44

  • MD5

    356c398d22d34c6e9a99d21bfcd06021

  • SHA1

    6c746fbcf96b59fcc4c02f974fe32e28ecfd8559

  • SHA256

    d9f2daec3b301039197a4e9bef97811f439e10be91d4bfa4c787945e7f19f9fa

  • SHA512

    ffa915f84cbdfc2d62001f0c1c3a8771476cc4fbf07b73f35e82c34cd9f14895669ad3564eaa645cb2709a63b0c9636754fd6b4b1c9eeabd56d575d3d74120c6

  • SSDEEP

    6144:pXaFZ30ZJ2NC5U9cXPqGIlWwaM54T36ybP:pXcZ30ZMNCc+qGIMlKyD

Score
10/10

Malware Config

Extracted

Family

rhadamanthys

C2

http://179.43.142.201/img/favicon.png

Targets

    • Target

      d9f2daec3b301039197a4e9bef97811f439e10be91d4bfa4c787945e7f19f9fa.bin

    • Size

      418KB

    • MD5

      356c398d22d34c6e9a99d21bfcd06021

    • SHA1

      6c746fbcf96b59fcc4c02f974fe32e28ecfd8559

    • SHA256

      d9f2daec3b301039197a4e9bef97811f439e10be91d4bfa4c787945e7f19f9fa

    • SHA512

      ffa915f84cbdfc2d62001f0c1c3a8771476cc4fbf07b73f35e82c34cd9f14895669ad3564eaa645cb2709a63b0c9636754fd6b4b1c9eeabd56d575d3d74120c6

    • SSDEEP

      6144:pXaFZ30ZJ2NC5U9cXPqGIlWwaM54T36ybP:pXcZ30ZMNCc+qGIMlKyD

    Score
    10/10
    • Detect rhadamanthys stealer shellcode

    • Rhadamanthys

      Rhadamanthys is an info stealer written in C++ first seen in August 2022.

MITRE ATT&CK Matrix

Tasks