General

  • Target

    848b2eb85051668a7b0f4bf4d7af471b2abaa287464bd6b913f78280bdae2fa0

  • Size

    304KB

  • Sample

    230505-w78p1adg95

  • MD5

    20435c33edf8f7fdaedf61ab1be9730e

  • SHA1

    42779f74355905fa0a0c28a6cdc86fc8d2094f18

  • SHA256

    848b2eb85051668a7b0f4bf4d7af471b2abaa287464bd6b913f78280bdae2fa0

  • SHA512

    93279a6f1c906e5746c692111a80723fd181c67edcd8c5d3f24eb32a6f71160f856b12ccf20c87b34d137f3d7da651d85fee61151909feb2255417074619c382

  • SSDEEP

    6144:d5eJ8UcE8f/aRaouv0zGsV8dEV7HVGIY1kS:d5eJbcE8f/H8MEVb4IW

Score
10/10

Malware Config

Extracted

Family

rhadamanthys

C2

http://179.43.142.201/img/favicon.png

Targets

    • Target

      848b2eb85051668a7b0f4bf4d7af471b2abaa287464bd6b913f78280bdae2fa0

    • Size

      304KB

    • MD5

      20435c33edf8f7fdaedf61ab1be9730e

    • SHA1

      42779f74355905fa0a0c28a6cdc86fc8d2094f18

    • SHA256

      848b2eb85051668a7b0f4bf4d7af471b2abaa287464bd6b913f78280bdae2fa0

    • SHA512

      93279a6f1c906e5746c692111a80723fd181c67edcd8c5d3f24eb32a6f71160f856b12ccf20c87b34d137f3d7da651d85fee61151909feb2255417074619c382

    • SSDEEP

      6144:d5eJ8UcE8f/aRaouv0zGsV8dEV7HVGIY1kS:d5eJbcE8f/H8MEVb4IW

    Score
    10/10
    • Detect rhadamanthys stealer shellcode

    • Rhadamanthys

      Rhadamanthys is an info stealer written in C++ first seen in August 2022.

MITRE ATT&CK Matrix

Tasks