General

  • Target

    98bdf6c6506d42ef1e1cc3fecbbd367fa82de45a1ca35e50847c9943a8d4e6fd

  • Size

    382KB

  • Sample

    230505-xalpmsgc4v

  • MD5

    ebc163a4f7a0d7ba6daa378fd483d8df

  • SHA1

    e56524fd612b95eba7e7843770832cdd2c237a67

  • SHA256

    98bdf6c6506d42ef1e1cc3fecbbd367fa82de45a1ca35e50847c9943a8d4e6fd

  • SHA512

    3f57cebc261aa7a2ad0944ec5f9c7d912f8739945c03542ed5a066d89c2d3cff06267298048b0eca32b6c0a5b0243671257e496b44f02720a0cbd6ba64165e01

  • SSDEEP

    6144:rd3qjyhPXX5j9FDtPS5R/46jgQc5S84Ut:xajyhPZrtPEfgQc5p4e

Score
10/10

Malware Config

Extracted

Family

rhadamanthys

C2

http://179.43.142.201/img/favicon.png

Targets

    • Target

      98bdf6c6506d42ef1e1cc3fecbbd367fa82de45a1ca35e50847c9943a8d4e6fd

    • Size

      382KB

    • MD5

      ebc163a4f7a0d7ba6daa378fd483d8df

    • SHA1

      e56524fd612b95eba7e7843770832cdd2c237a67

    • SHA256

      98bdf6c6506d42ef1e1cc3fecbbd367fa82de45a1ca35e50847c9943a8d4e6fd

    • SHA512

      3f57cebc261aa7a2ad0944ec5f9c7d912f8739945c03542ed5a066d89c2d3cff06267298048b0eca32b6c0a5b0243671257e496b44f02720a0cbd6ba64165e01

    • SSDEEP

      6144:rd3qjyhPXX5j9FDtPS5R/46jgQc5S84Ut:xajyhPZrtPEfgQc5p4e

    Score
    10/10
    • Detect rhadamanthys stealer shellcode

    • Rhadamanthys

      Rhadamanthys is an info stealer written in C++ first seen in August 2022.

MITRE ATT&CK Matrix

Tasks