General

  • Target

    04206c00c21d25634e6e127d3b69352328e1176eb0e28fbcbce8c608cd6d4f9a

  • Size

    381KB

  • Sample

    230504-lt8sqsdc3w

  • MD5

    1e994822c6e0b523665b57f773b1d40f

  • SHA1

    31f1e3782d767adaa51dc42a74d00f99845ec96d

  • SHA256

    04206c00c21d25634e6e127d3b69352328e1176eb0e28fbcbce8c608cd6d4f9a

  • SHA512

    28c7ddcac245bc8a2000e6e3c19e32773f084dd25686e2a5383ae9fa9ecde3c79c6c54be5f64e718cd9185b809910356cd944224bb7ab86e74ed5df7f4619c09

  • SSDEEP

    6144:gmOwlJjauABTC26B94FwJFIDMzPjeI5B3t:PNlJeukV6v4uJDjlB9

Score
10/10

Malware Config

Extracted

Family

rhadamanthys

C2

http://179.43.142.201/img/favicon.png

Targets

    • Target

      04206c00c21d25634e6e127d3b69352328e1176eb0e28fbcbce8c608cd6d4f9a

    • Size

      381KB

    • MD5

      1e994822c6e0b523665b57f773b1d40f

    • SHA1

      31f1e3782d767adaa51dc42a74d00f99845ec96d

    • SHA256

      04206c00c21d25634e6e127d3b69352328e1176eb0e28fbcbce8c608cd6d4f9a

    • SHA512

      28c7ddcac245bc8a2000e6e3c19e32773f084dd25686e2a5383ae9fa9ecde3c79c6c54be5f64e718cd9185b809910356cd944224bb7ab86e74ed5df7f4619c09

    • SSDEEP

      6144:gmOwlJjauABTC26B94FwJFIDMzPjeI5B3t:PNlJeukV6v4uJDjlB9

    Score
    10/10
    • Detect rhadamanthys stealer shellcode

    • Rhadamanthys

      Rhadamanthys is an info stealer written in C++ first seen in August 2022.

MITRE ATT&CK Matrix

Tasks