General

  • Target

    d4643442e6c7bd86062c146b86962d5f1e1b25536c625a2943505cef171208e4

  • Size

    380KB

  • Sample

    230504-1sp2kafd47

  • MD5

    967e369b4527142333aa03052dbe9bca

  • SHA1

    bd37ecd4abb8a8554c5daaec032230757e6fcc64

  • SHA256

    d4643442e6c7bd86062c146b86962d5f1e1b25536c625a2943505cef171208e4

  • SHA512

    8f40be9944eb1f3909f6774eed1dcaf06561707f343c835dc8033ea72b930a244754e4bbc3f55b6fabd3efb7a9798eed19b1e76c0047ea6a699ac139e3de708f

  • SSDEEP

    6144:Un1I9F/M6S9NcuYdYh71RNrOtd01mNw8Aw4U5Wyytgr/:81A06S9NcFYR1RsE1/5w4by4I/

Score
10/10

Malware Config

Extracted

Family

rhadamanthys

C2

http://179.43.142.201/img/favicon.png

Targets

    • Target

      d4643442e6c7bd86062c146b86962d5f1e1b25536c625a2943505cef171208e4

    • Size

      380KB

    • MD5

      967e369b4527142333aa03052dbe9bca

    • SHA1

      bd37ecd4abb8a8554c5daaec032230757e6fcc64

    • SHA256

      d4643442e6c7bd86062c146b86962d5f1e1b25536c625a2943505cef171208e4

    • SHA512

      8f40be9944eb1f3909f6774eed1dcaf06561707f343c835dc8033ea72b930a244754e4bbc3f55b6fabd3efb7a9798eed19b1e76c0047ea6a699ac139e3de708f

    • SSDEEP

      6144:Un1I9F/M6S9NcuYdYh71RNrOtd01mNw8Aw4U5Wyytgr/:81A06S9NcFYR1RsE1/5w4by4I/

    Score
    10/10
    • Detect rhadamanthys stealer shellcode

    • Rhadamanthys

      Rhadamanthys is an info stealer written in C++ first seen in August 2022.

MITRE ATT&CK Matrix

Tasks