General

  • Target

    151fb5d2362e854d6b2cf87a31fdd101.bin

  • Size

    221KB

  • Sample

    230505-wsajnaca35

  • MD5

    4507117bdb0f7e67e737cd3662508ff9

  • SHA1

    9556c5b223e9ee7251f5db34ecfb7a3d3ef371db

  • SHA256

    f9f0ab09c8804934139e987c1c186e62d5957fc495efd815322e0a8d48edaed0

  • SHA512

    ac65ba15672e925e24ada51b40fd722fc17b6ed4b255cfabbc4a6729683917600859661ed52339614db911bf6606ca5726ed86f47e633e3cf0b861ba8441705d

  • SSDEEP

    6144:wjiuEFTz7z/m92Us24Q4ap2y8Z8LtQYTSgKG9Io:wGBFzn/Us2ua2pZ0TnK6Io

Score
10/10

Malware Config

Extracted

Family

rhadamanthys

C2

http://179.43.142.201/img/favicon.png

Targets

    • Target

      d668246d8d9414c778f83f8f15d2ad68849c4b736d0cf65e126ffc7a7a27377f.exe

    • Size

      410KB

    • MD5

      151fb5d2362e854d6b2cf87a31fdd101

    • SHA1

      12e1f114ddfc567c2718a7283f09f2b5291faf88

    • SHA256

      d668246d8d9414c778f83f8f15d2ad68849c4b736d0cf65e126ffc7a7a27377f

    • SHA512

      ca7b106393c63b202505c10695fed8330060613cf0c62a7b3dc819fd95af4464609a85e2af3cadf1314a917f65de02fbcd81a991100d67e9a1e0bfa8e885c622

    • SSDEEP

      6144:eB/LoBCFoHjL5xRPpe31K1UyuWkHOM8gOh9qLiGPfqb:eB/cBCFoD9zxe3k1UyuWkHOdaGGPo

    Score
    10/10
    • Detect rhadamanthys stealer shellcode

    • Rhadamanthys

      Rhadamanthys is an info stealer written in C++ first seen in August 2022.

MITRE ATT&CK Matrix

Tasks