General

  • Target

    670a203a7df0a928e57047e895501a78.exe

  • Size

    335KB

  • Sample

    230505-pnxeasad95

  • MD5

    670a203a7df0a928e57047e895501a78

  • SHA1

    8efa129a7cf8a34aabaaa41f1f4cb5996b3f75da

  • SHA256

    0bb7a4e89ff0c6762fdac3b19a15b1b16efd6f063097c82dfce9642ccb0732e3

  • SHA512

    c589e16ccb9caa4324e9f0675f50d9b703abefca1b1650dad3486ae320cbea1da5133676c838e4b070a34a9e9bc165d63d76e32f34946991cc5746f46d6a09ff

  • SSDEEP

    6144:SI7XXJdlU5yEeLSgDzJQDzhfg6PqEDbCS8cu16tkNol:77nJdlUkEiDWDhgkCcavNC

Score
10/10

Malware Config

Extracted

Family

rhadamanthys

C2

http://179.43.142.201/img/favicon.png

Targets

    • Target

      670a203a7df0a928e57047e895501a78.exe

    • Size

      335KB

    • MD5

      670a203a7df0a928e57047e895501a78

    • SHA1

      8efa129a7cf8a34aabaaa41f1f4cb5996b3f75da

    • SHA256

      0bb7a4e89ff0c6762fdac3b19a15b1b16efd6f063097c82dfce9642ccb0732e3

    • SHA512

      c589e16ccb9caa4324e9f0675f50d9b703abefca1b1650dad3486ae320cbea1da5133676c838e4b070a34a9e9bc165d63d76e32f34946991cc5746f46d6a09ff

    • SSDEEP

      6144:SI7XXJdlU5yEeLSgDzJQDzhfg6PqEDbCS8cu16tkNol:77nJdlUkEiDWDhgkCcavNC

    Score
    10/10
    • Detect rhadamanthys stealer shellcode

    • Rhadamanthys

      Rhadamanthys is an info stealer written in C++ first seen in August 2022.

MITRE ATT&CK Matrix

Tasks