General
-
Target
4bf205441b31cc7da072ddee0da326004600850d5e94a4768b1cabc119932cec
-
Size
381KB
-
Sample
230504-rn2ecsch98
-
MD5
42104b2f55deb06ef7588b7655197b8b
-
SHA1
5f337ee4ac878f671e909b96210f7e0a36ab23f8
-
SHA256
4bf205441b31cc7da072ddee0da326004600850d5e94a4768b1cabc119932cec
-
SHA512
f4f202a93049adf52679bf9bec095be146d7b86ab88266cd4f62dc4f548b7a1d71fa48e64c1d2a798ef30a4cbb5be31975d2a79149cd11eaf2907acfaa19de77
-
SSDEEP
6144:A25Vf1At3YA0RDGXkqxJhb8S/07V14BdtQ:35F1AqA0RDG0qHJ8S0V1m3Q
Static task
static1
Behavioral task
behavioral1
Sample
4bf205441b31cc7da072ddee0da326004600850d5e94a4768b1cabc119932cec.exe
Resource
win10-20230220-en
Malware Config
Extracted
rhadamanthys
http://179.43.142.201/img/favicon.png
Targets
-
-
Target
4bf205441b31cc7da072ddee0da326004600850d5e94a4768b1cabc119932cec
-
Size
381KB
-
MD5
42104b2f55deb06ef7588b7655197b8b
-
SHA1
5f337ee4ac878f671e909b96210f7e0a36ab23f8
-
SHA256
4bf205441b31cc7da072ddee0da326004600850d5e94a4768b1cabc119932cec
-
SHA512
f4f202a93049adf52679bf9bec095be146d7b86ab88266cd4f62dc4f548b7a1d71fa48e64c1d2a798ef30a4cbb5be31975d2a79149cd11eaf2907acfaa19de77
-
SSDEEP
6144:A25Vf1At3YA0RDGXkqxJhb8S/07V14BdtQ:35F1AqA0RDG0qHJ8S0V1m3Q
Score10/10-
Detect rhadamanthys stealer shellcode
-
Rhadamanthys
Rhadamanthys is an info stealer written in C++ first seen in August 2022.
-