Overview

overview

10

Static

static

3

ec8bc90b9d...e4.exe

windows7-x64

10

ec8bc90b9d...e4.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ec8bc90b9de0f5c344cc4f7cbfb4fc74a2c44f5a4375e3cdfc4aac15adbe9ce4.bin

  • Size

    278KB

  • Sample

    230501-xprjfaeg64

  • MD5

    79cf7544328e13fdd9a7cac324ee07d8

  • SHA1

    6d59985d3f47f8babba5ff54cca24599dafc4bfd

  • SHA256

    ec8bc90b9de0f5c344cc4f7cbfb4fc74a2c44f5a4375e3cdfc4aac15adbe9ce4

  • SHA512

    b798ba5b861bbf715d9f2691b35d00212502544b93e96a8bcf83fa8889c1dc6048cf051f8abc25a8e2ae786bc13e38a81cf6743e050dfbf7e4c88ffea0cd70d3

  • SSDEEP

    3072:Mooj+bJSEhnxhszjGFVGFaoHOIfLjlJlBHhOFwTQePAw1YECGQAJ745ivau:G+1TJ7QTlJ7HhOOEeL1FRJ7PvR

Score
10/10
rhadamanthysstealer

Malware Config

Extracted

Family

rhadamanthys

C2

http://179.43.142.201/img/favicon.png

Targets

    • Target

      ec8bc90b9de0f5c344cc4f7cbfb4fc74a2c44f5a4375e3cdfc4aac15adbe9ce4.bin

    • Size

      278KB

    • MD5

      79cf7544328e13fdd9a7cac324ee07d8

    • SHA1

      6d59985d3f47f8babba5ff54cca24599dafc4bfd

    • SHA256

      ec8bc90b9de0f5c344cc4f7cbfb4fc74a2c44f5a4375e3cdfc4aac15adbe9ce4

    • SHA512

      b798ba5b861bbf715d9f2691b35d00212502544b93e96a8bcf83fa8889c1dc6048cf051f8abc25a8e2ae786bc13e38a81cf6743e050dfbf7e4c88ffea0cd70d3

    • SSDEEP

      3072:Mooj+bJSEhnxhszjGFVGFaoHOIfLjlJlBHhOFwTQePAw1YECGQAJ745ivau:G+1TJ7QTlJ7HhOOEeL1FRJ7PvR

    Score
    10/10
    rhadamanthysstealer

    • Detect rhadamanthys stealer shellcode

    • Rhadamanthys

      Rhadamanthys is an info stealer written in C++ first seen in August 2022.

      stealerrhadamanthys
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks