General

  • Target

    873d028efd851cc791429d3ed8c42e76482f67448348b2057f3f22ac9cfe735f

  • Size

    380KB

  • Sample

    230505-w8jr9sfh9x

  • MD5

    9227f71f229ea818dfcafa7fd8108fc4

  • SHA1

    86dbc04aaa29f73fa0e4dc1aa15322d682e40d6c

  • SHA256

    873d028efd851cc791429d3ed8c42e76482f67448348b2057f3f22ac9cfe735f

  • SHA512

    98a5bd8bf318e37ef2887f1010e45a1afdd0e7bfa98fd074a9f2e0bf55e4d3998231f04d2ddb7c89cb047bf056f64bce62bce05ec1a3677923684207bae31b21

  • SSDEEP

    6144:2JC/xzXwN1fG8xb0WEtWAF8fUSYPJ1S8HYtk:oCdXwNtVxQWEtWVfUSYOQS

Score
10/10

Malware Config

Extracted

Family

rhadamanthys

C2

http://179.43.142.201/img/favicon.png

Targets

    • Target

      873d028efd851cc791429d3ed8c42e76482f67448348b2057f3f22ac9cfe735f

    • Size

      380KB

    • MD5

      9227f71f229ea818dfcafa7fd8108fc4

    • SHA1

      86dbc04aaa29f73fa0e4dc1aa15322d682e40d6c

    • SHA256

      873d028efd851cc791429d3ed8c42e76482f67448348b2057f3f22ac9cfe735f

    • SHA512

      98a5bd8bf318e37ef2887f1010e45a1afdd0e7bfa98fd074a9f2e0bf55e4d3998231f04d2ddb7c89cb047bf056f64bce62bce05ec1a3677923684207bae31b21

    • SSDEEP

      6144:2JC/xzXwN1fG8xb0WEtWAF8fUSYPJ1S8HYtk:oCdXwNtVxQWEtWVfUSYOQS

    Score
    10/10
    • Detect rhadamanthys stealer shellcode

    • Rhadamanthys

      Rhadamanthys is an info stealer written in C++ first seen in August 2022.

MITRE ATT&CK Matrix

Tasks