General

  • Target

    3a616eddf8c7a237bce10b850668c702491040621e7bb4990edee13f3011a78d

  • Size

    365KB

  • Sample

    230505-wx9jjsef4x

  • MD5

    665d564c8829450addeff530b6db9099

  • SHA1

    50ad362d7fd8284b87c69b4550e0a41b91bbeaf7

  • SHA256

    3a616eddf8c7a237bce10b850668c702491040621e7bb4990edee13f3011a78d

  • SHA512

    9c4f58b28ff3a0ee161f427e622a7d069f8d005e071eb64f3baf8ce26ecbcfbf58a238b9defd5d69b437abec612c6e9cfddbf730addfea377805d5ed4d18214a

  • SSDEEP

    3072:iijyNnzEEL/ur/+rpGEu47LbXWLESlIVZOyq5NGBAUDkp9d97stERod5D6g/SoS8:ZjyeC/q+r8EHnrWLPIVTq9pj9edxX

Score
10/10

Malware Config

Extracted

Family

rhadamanthys

C2

http://179.43.142.201/img/favicon.png

Targets

    • Target

      3a616eddf8c7a237bce10b850668c702491040621e7bb4990edee13f3011a78d

    • Size

      365KB

    • MD5

      665d564c8829450addeff530b6db9099

    • SHA1

      50ad362d7fd8284b87c69b4550e0a41b91bbeaf7

    • SHA256

      3a616eddf8c7a237bce10b850668c702491040621e7bb4990edee13f3011a78d

    • SHA512

      9c4f58b28ff3a0ee161f427e622a7d069f8d005e071eb64f3baf8ce26ecbcfbf58a238b9defd5d69b437abec612c6e9cfddbf730addfea377805d5ed4d18214a

    • SSDEEP

      3072:iijyNnzEEL/ur/+rpGEu47LbXWLESlIVZOyq5NGBAUDkp9d97stERod5D6g/SoS8:ZjyeC/q+r8EHnrWLPIVTq9pj9edxX

    Score
    10/10
    • Detect rhadamanthys stealer shellcode

    • Rhadamanthys

      Rhadamanthys is an info stealer written in C++ first seen in August 2022.

MITRE ATT&CK Matrix

Tasks