General

  • Target

    03e327a0c758f651e1b261a62d571b919ff1b7af588d5c588a5ee3a4476a5539

  • Size

    380KB

  • Sample

    230504-z1c7asha8x

  • MD5

    1312fe60ec8cf17e186b6c670a546193

  • SHA1

    8f867fb5b64e90fe5ab3a8b22a5c297d76207a98

  • SHA256

    03e327a0c758f651e1b261a62d571b919ff1b7af588d5c588a5ee3a4476a5539

  • SHA512

    79e0afdc827a4860d650dcf12fa1ed066aacc6bfbe9c92f05fb8fb336cdeb79c263509f5cb464b3a5fe5559d52e8847efc815796f111f83371328e98b1ecf37f

  • SSDEEP

    6144:PsvBIGOr5Gq/Ey87dxpIXMkvKAA3CMII/G4bit9r/:Uvuvr5l87dbE7lALIIepZ/

Score
10/10

Malware Config

Extracted

Family

rhadamanthys

C2

http://179.43.142.201/img/favicon.png

Targets

    • Target

      03e327a0c758f651e1b261a62d571b919ff1b7af588d5c588a5ee3a4476a5539

    • Size

      380KB

    • MD5

      1312fe60ec8cf17e186b6c670a546193

    • SHA1

      8f867fb5b64e90fe5ab3a8b22a5c297d76207a98

    • SHA256

      03e327a0c758f651e1b261a62d571b919ff1b7af588d5c588a5ee3a4476a5539

    • SHA512

      79e0afdc827a4860d650dcf12fa1ed066aacc6bfbe9c92f05fb8fb336cdeb79c263509f5cb464b3a5fe5559d52e8847efc815796f111f83371328e98b1ecf37f

    • SSDEEP

      6144:PsvBIGOr5Gq/Ey87dxpIXMkvKAA3CMII/G4bit9r/:Uvuvr5l87dbE7lALIIepZ/

    Score
    10/10
    • Detect rhadamanthys stealer shellcode

    • Rhadamanthys

      Rhadamanthys is an info stealer written in C++ first seen in August 2022.

MITRE ATT&CK Matrix

Tasks