General

  • Target

    ded5a4d9889aef4a35f13dad905b570fccc0ae497e7f6154a51a0fcb5e824024.bin

  • Size

    278KB

  • Sample

    230501-xe81qsff5t

  • MD5

    9bf70f05aa4367c9d0d1d3f5088728f0

  • SHA1

    d0b803ab21ee76f2c1d61393a8090bcb86fcfd5b

  • SHA256

    ded5a4d9889aef4a35f13dad905b570fccc0ae497e7f6154a51a0fcb5e824024

  • SHA512

    cc17076362bc2101c21c7df80eff160df560a28fc22c8f57340630360db96912b0ee28494d06270a43c2959d51973dc1f028f6a8ae9ccbd40a50ca929e2f30ed

  • SSDEEP

    3072:pvhoFjLKxTor4ZBNPLJ2efrBM72JJ9g1bVwAOV+ajjAeKKZiQ+1OuZR+31c5U1U:lAMQ4hz46gG4wpHjAeKCiQ+1bO1Z

Score
10/10

Malware Config

Extracted

Family

rhadamanthys

C2

http://179.43.142.201/img/favicon.png

Targets

    • Target

      ded5a4d9889aef4a35f13dad905b570fccc0ae497e7f6154a51a0fcb5e824024.bin

    • Size

      278KB

    • MD5

      9bf70f05aa4367c9d0d1d3f5088728f0

    • SHA1

      d0b803ab21ee76f2c1d61393a8090bcb86fcfd5b

    • SHA256

      ded5a4d9889aef4a35f13dad905b570fccc0ae497e7f6154a51a0fcb5e824024

    • SHA512

      cc17076362bc2101c21c7df80eff160df560a28fc22c8f57340630360db96912b0ee28494d06270a43c2959d51973dc1f028f6a8ae9ccbd40a50ca929e2f30ed

    • SSDEEP

      3072:pvhoFjLKxTor4ZBNPLJ2efrBM72JJ9g1bVwAOV+ajjAeKKZiQ+1OuZR+31c5U1U:lAMQ4hz46gG4wpHjAeKCiQ+1bO1Z

    Score
    10/10
    • Detect rhadamanthys stealer shellcode

    • Rhadamanthys

      Rhadamanthys is an info stealer written in C++ first seen in August 2022.

MITRE ATT&CK Matrix

Tasks