General

  • Target

    e164802c98bccc8d0c2803f2de7b351ab27f55d2ffce8680d176a328286411e7.bin

  • Size

    410KB

  • Sample

    230501-xg379sfh2v

  • MD5

    b42fe381e8a6f73f3a7f4d895793f107

  • SHA1

    cfb2b425391bad29f5ac04849d6a5047ca413e20

  • SHA256

    e164802c98bccc8d0c2803f2de7b351ab27f55d2ffce8680d176a328286411e7

  • SHA512

    63b885262b5318124807d2b1c7847a6e34c80b0faed6d416f8ad9ac9aa125c4b7c1f919771462ffd0d4ab8ba7126b4522c57770da3d32a918f040a7e114179c8

  • SSDEEP

    6144:W1rT4amUof/x4RAdwCy6i14L1OOLPub4OPY1fqx:WJThmUofCRbCniepdL2bjPY16

Score
10/10

Malware Config

Extracted

Family

rhadamanthys

C2

http://179.43.142.201/img/favicon.png

Targets

    • Target

      e164802c98bccc8d0c2803f2de7b351ab27f55d2ffce8680d176a328286411e7.bin

    • Size

      410KB

    • MD5

      b42fe381e8a6f73f3a7f4d895793f107

    • SHA1

      cfb2b425391bad29f5ac04849d6a5047ca413e20

    • SHA256

      e164802c98bccc8d0c2803f2de7b351ab27f55d2ffce8680d176a328286411e7

    • SHA512

      63b885262b5318124807d2b1c7847a6e34c80b0faed6d416f8ad9ac9aa125c4b7c1f919771462ffd0d4ab8ba7126b4522c57770da3d32a918f040a7e114179c8

    • SSDEEP

      6144:W1rT4amUof/x4RAdwCy6i14L1OOLPub4OPY1fqx:WJThmUofCRbCniepdL2bjPY16

    Score
    10/10
    • Detect rhadamanthys stealer shellcode

    • Rhadamanthys

      Rhadamanthys is an info stealer written in C++ first seen in August 2022.

MITRE ATT&CK Matrix

Tasks