General

  • Target

    4bf205441b31cc7da072ddee0da326004600850d5e94a4768b1cabc119932cec

  • Size

    381KB

  • Sample

    230504-rn2ecsch98

  • MD5

    42104b2f55deb06ef7588b7655197b8b

  • SHA1

    5f337ee4ac878f671e909b96210f7e0a36ab23f8

  • SHA256

    4bf205441b31cc7da072ddee0da326004600850d5e94a4768b1cabc119932cec

  • SHA512

    f4f202a93049adf52679bf9bec095be146d7b86ab88266cd4f62dc4f548b7a1d71fa48e64c1d2a798ef30a4cbb5be31975d2a79149cd11eaf2907acfaa19de77

  • SSDEEP

    6144:A25Vf1At3YA0RDGXkqxJhb8S/07V14BdtQ:35F1AqA0RDG0qHJ8S0V1m3Q

Score
10/10

Malware Config

Extracted

Family

rhadamanthys

C2

http://179.43.142.201/img/favicon.png

Targets

    • Target

      4bf205441b31cc7da072ddee0da326004600850d5e94a4768b1cabc119932cec

    • Size

      381KB

    • MD5

      42104b2f55deb06ef7588b7655197b8b

    • SHA1

      5f337ee4ac878f671e909b96210f7e0a36ab23f8

    • SHA256

      4bf205441b31cc7da072ddee0da326004600850d5e94a4768b1cabc119932cec

    • SHA512

      f4f202a93049adf52679bf9bec095be146d7b86ab88266cd4f62dc4f548b7a1d71fa48e64c1d2a798ef30a4cbb5be31975d2a79149cd11eaf2907acfaa19de77

    • SSDEEP

      6144:A25Vf1At3YA0RDGXkqxJhb8S/07V14BdtQ:35F1AqA0RDG0qHJ8S0V1m3Q

    Score
    10/10
    • Detect rhadamanthys stealer shellcode

    • Rhadamanthys

      Rhadamanthys is an info stealer written in C++ first seen in August 2022.

MITRE ATT&CK Matrix

Tasks