General

  • Target

    e1da569f3b8909fc2c03f2c982ea8170cd9b1a3274f137e12aa2d14b69cfd7cc.bin

  • Size

    374KB

  • Sample

    230501-xhdzrsfh4s

  • MD5

    c42b976a0ac5f2f03869cf9df592c1d0

  • SHA1

    b5f4dcd0c6d629d496746701d39f60e3e9438e00

  • SHA256

    e1da569f3b8909fc2c03f2c982ea8170cd9b1a3274f137e12aa2d14b69cfd7cc

  • SHA512

    6ce44264ad359061cfa6e92c615ecdfdd12c9897553535e8a8e412bea0238d414cf6f7a7a7bd2c5db2fba355c32b0bb938b7a72d072f498e54b9f81fc9be6dc4

  • SSDEEP

    6144:Rh4I/V6nwfQd90jJey/t9iR9geTLRhTtPY12+yB0dR:Rhv/V6nwfQdKjQyFMR9geTLRhTtf+a

Score
10/10

Malware Config

Extracted

Family

rhadamanthys

C2

http://179.43.142.201/img/favicon.png

Targets

    • Target

      e1da569f3b8909fc2c03f2c982ea8170cd9b1a3274f137e12aa2d14b69cfd7cc.bin

    • Size

      374KB

    • MD5

      c42b976a0ac5f2f03869cf9df592c1d0

    • SHA1

      b5f4dcd0c6d629d496746701d39f60e3e9438e00

    • SHA256

      e1da569f3b8909fc2c03f2c982ea8170cd9b1a3274f137e12aa2d14b69cfd7cc

    • SHA512

      6ce44264ad359061cfa6e92c615ecdfdd12c9897553535e8a8e412bea0238d414cf6f7a7a7bd2c5db2fba355c32b0bb938b7a72d072f498e54b9f81fc9be6dc4

    • SSDEEP

      6144:Rh4I/V6nwfQd90jJey/t9iR9geTLRhTtPY12+yB0dR:Rhv/V6nwfQdKjQyFMR9geTLRhTtf+a

    Score
    10/10
    • Detect rhadamanthys stealer shellcode

    • Rhadamanthys

      Rhadamanthys is an info stealer written in C++ first seen in August 2022.

MITRE ATT&CK Matrix

Tasks