General

  • Target

    4c2e515133a15248b8abd558c58974b3299c79b1f932c57e8fe3cb2d3d09982f

  • Size

    381KB

  • Sample

    230504-hc7bssad43

  • MD5

    f086faa85a031e43e95537a88fa6aba5

  • SHA1

    70b3dde63fd9046b28fee1c5edce1cb75e847382

  • SHA256

    4c2e515133a15248b8abd558c58974b3299c79b1f932c57e8fe3cb2d3d09982f

  • SHA512

    abf7bc9c955806cc88c61c8a397e68a6b133067fa0dbecdc9d259a1f5f9c39ebe50a01974c4f64a4457916a2c4323c509aedb54923e48fe12274acd7a7b901d8

  • SSDEEP

    6144:gcR6sEkGGBY5cuCSfaK9Pdpsm/ws6J4Xpjt0:nosEkGcSdxxwszz

Score
10/10

Malware Config

Extracted

Family

rhadamanthys

C2

http://179.43.142.201/img/favicon.png

Targets

    • Target

      4c2e515133a15248b8abd558c58974b3299c79b1f932c57e8fe3cb2d3d09982f

    • Size

      381KB

    • MD5

      f086faa85a031e43e95537a88fa6aba5

    • SHA1

      70b3dde63fd9046b28fee1c5edce1cb75e847382

    • SHA256

      4c2e515133a15248b8abd558c58974b3299c79b1f932c57e8fe3cb2d3d09982f

    • SHA512

      abf7bc9c955806cc88c61c8a397e68a6b133067fa0dbecdc9d259a1f5f9c39ebe50a01974c4f64a4457916a2c4323c509aedb54923e48fe12274acd7a7b901d8

    • SSDEEP

      6144:gcR6sEkGGBY5cuCSfaK9Pdpsm/ws6J4Xpjt0:nosEkGcSdxxwszz

    Score
    10/10
    • Detect rhadamanthys stealer shellcode

    • Rhadamanthys

      Rhadamanthys is an info stealer written in C++ first seen in August 2022.

MITRE ATT&CK Matrix

Tasks