Overview

overview

10

Static

static

3

setup.exe

windows7-x64

10

setup.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    setup.exe

  • Size

    305KB

  • Sample

    230503-asxtaseh3x

  • MD5

    4671e3c9c691fdd8fbae90d1db23729a

  • SHA1

    e7bb4967178fdfb723b4034587b748d94cbc697f

  • SHA256

    c99a1c764d580a930af69a77b18e395223d7c37cddd8524151f5c457add290c1

  • SHA512

    0cb9cd57025543e27e5beda3f82074d608bc4ff49ab901269b1b450cb24f6e1ae9689f375a697e0ffac32de8f7706ee618f46cc3aef93aaf367cb07b92406b9d

  • SSDEEP

    6144:013HI2Q6/Xk2VTuGS8G+B5hbGCWhaeyoo6VM8/AG:013od6/Xk8SaVXWMIA

Score
10/10
rhadamanthysstealer

Malware Config

Extracted

Family

rhadamanthys

C2

http://179.43.142.201/img/favicon.png

Targets

    • Target

      setup.exe

    • Size

      305KB

    • MD5

      4671e3c9c691fdd8fbae90d1db23729a

    • SHA1

      e7bb4967178fdfb723b4034587b748d94cbc697f

    • SHA256

      c99a1c764d580a930af69a77b18e395223d7c37cddd8524151f5c457add290c1

    • SHA512

      0cb9cd57025543e27e5beda3f82074d608bc4ff49ab901269b1b450cb24f6e1ae9689f375a697e0ffac32de8f7706ee618f46cc3aef93aaf367cb07b92406b9d

    • SSDEEP

      6144:013HI2Q6/Xk2VTuGS8G+B5hbGCWhaeyoo6VM8/AG:013od6/Xk8SaVXWMIA

    Score
    10/10
    rhadamanthysstealer

    • Detect rhadamanthys stealer shellcode

    • Rhadamanthys

      Rhadamanthys is an info stealer written in C++ first seen in August 2022.

      stealerrhadamanthys
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks