General

  • Target

    b427efa5aa66284f7d3da48fea8f0c662ea74f7e997403f9a862239b54c01370

  • Size

    361KB

  • Sample

    230505-qgefkscf3t

  • MD5

    1c11e43552cacb45d802f08439ddea42

  • SHA1

    affe65fe325c50f939aa993b9b359d54d0f8abc0

  • SHA256

    b427efa5aa66284f7d3da48fea8f0c662ea74f7e997403f9a862239b54c01370

  • SHA512

    6b447361ad415259baf4388b52318245d34bfd1ae02ba94709131fcae2c6f60ecf0898046ac20474d77babd2d681bac970c9fb7b0b4092aa9aa93eaf1d2276db

  • SSDEEP

    6144:kclXwwIsNd5+vGNhsH4A0yZ4cn4cscDzNol:kWdIsAvDYql4RcDzNC

Score
10/10

Malware Config

Extracted

Family

rhadamanthys

C2

http://179.43.142.201/img/favicon.png

Targets

    • Target

      b427efa5aa66284f7d3da48fea8f0c662ea74f7e997403f9a862239b54c01370

    • Size

      361KB

    • MD5

      1c11e43552cacb45d802f08439ddea42

    • SHA1

      affe65fe325c50f939aa993b9b359d54d0f8abc0

    • SHA256

      b427efa5aa66284f7d3da48fea8f0c662ea74f7e997403f9a862239b54c01370

    • SHA512

      6b447361ad415259baf4388b52318245d34bfd1ae02ba94709131fcae2c6f60ecf0898046ac20474d77babd2d681bac970c9fb7b0b4092aa9aa93eaf1d2276db

    • SSDEEP

      6144:kclXwwIsNd5+vGNhsH4A0yZ4cn4cscDzNol:kWdIsAvDYql4RcDzNC

    Score
    10/10
    • Detect rhadamanthys stealer shellcode

    • Rhadamanthys

      Rhadamanthys is an info stealer written in C++ first seen in August 2022.

MITRE ATT&CK Matrix

Tasks