General
- Target 151fb5d2362e854d6b2cf87a31fdd101.bin
- Size 221KB
- Sample230504-bh331abd3w
- SHA256 f9f0ab09c8804934139e987c1c186e62d5957fc495efd815322e0a8d48edaed0
- MD5 4507117bdb0f7e67e737cd3662508ff9
- SHA1 9556c5b223e9ee7251f5db34ecfb7a3d3ef371db
- SHA512 ac65ba15672e925e24ada51b40fd722fc17b6ed4b255cfabbc4a6729683917600859661ed52339614db911bf6606ca5726ed86f47e633e3cf0b861ba8441705d
- SSDEEP 6144:wjiuEFTz7z/m92Us24Q4ap2y8Z8LtQYTSgKG9Io:wGBFzn/Us2ua2pZ0TnK6Io
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
d668246d8d9414c778f83f8f15d2ad68849c4b736d0cf65e126ffc7a7a27377f.exe
Resource
win7-20230220-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
d668246d8d9414c778f83f8f15d2ad68849c4b736d0cf65e126ffc7a7a27377f.exe
Resource
win10v2004-20230220-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
rhadamanthys
C2
-
http://179.43.142.201/img/favicon.png
Targets
-
- Target d668246d8d9414c778f83f8f15d2ad68849c4b736d0cf65e126ffc7a7a27377f.exe
- Size 410KB
- SHA256 d668246d8d9414c778f83f8f15d2ad68849c4b736d0cf65e126ffc7a7a27377f
- MD5 151fb5d2362e854d6b2cf87a31fdd101
- SHA1 12e1f114ddfc567c2718a7283f09f2b5291faf88
- SHA512 ca7b106393c63b202505c10695fed8330060613cf0c62a7b3dc819fd95af4464609a85e2af3cadf1314a917f65de02fbcd81a991100d67e9a1e0bfa8e885c622
- SSDEEP 6144:eB/LoBCFoHjL5xRPpe31K1UyuWkHOM8gOh9qLiGPfqb:eB/cBCFoD9zxe3k1UyuWkHOdaGGPo
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Detect rhadamanthys stealer shellcode
-
Rhadamanthys
Rhadamanthys is an info stealer written in C++ first seen in August 2022.