General

  • Target

    e65b8e0879ce29270f142ef12d17f8c5.exe.bin

  • Size

    397KB

  • Sample

    230501-xkswpsgb5s

  • MD5

    e65b8e0879ce29270f142ef12d17f8c5

  • SHA1

    c340cb6274f1bd51743738de0d97d1c452c0ee66

  • SHA256

    82ea179f56b417c7c1d3cd60eb56c0812f841e5326d9f02e3c31e9b03cad96af

  • SHA512

    9ca8ce1bc06ebaa8c2131c6a4c24e0b818ed8da3c82d91ef3a566ae9898381cef0a331293bcfce8616985899b1bcaf078935b33da52310fa4b86932f4efb7bd0

  • SSDEEP

    6144:lqO3WIcTAFpCzQgSQZplduroib/ThRvkgaRcwvPs9/alCefK1E:lqOmFAFpCz7hZpud/lpkgaqCs9ICZE

Score
10/10

Malware Config

Extracted

Family

rhadamanthys

C2

http://179.43.142.201/img/favicon.png

Targets

    • Target

      e65b8e0879ce29270f142ef12d17f8c5.exe.bin

    • Size

      397KB

    • MD5

      e65b8e0879ce29270f142ef12d17f8c5

    • SHA1

      c340cb6274f1bd51743738de0d97d1c452c0ee66

    • SHA256

      82ea179f56b417c7c1d3cd60eb56c0812f841e5326d9f02e3c31e9b03cad96af

    • SHA512

      9ca8ce1bc06ebaa8c2131c6a4c24e0b818ed8da3c82d91ef3a566ae9898381cef0a331293bcfce8616985899b1bcaf078935b33da52310fa4b86932f4efb7bd0

    • SSDEEP

      6144:lqO3WIcTAFpCzQgSQZplduroib/ThRvkgaRcwvPs9/alCefK1E:lqOmFAFpCz7hZpud/lpkgaqCs9ICZE

    Score
    10/10
    • Detect rhadamanthys stealer shellcode

    • Rhadamanthys

      Rhadamanthys is an info stealer written in C++ first seen in August 2022.

MITRE ATT&CK Matrix

Tasks