General
-
Target
a55f9f9e6842e250847a2c4c5737812f.exe.bin
-
Size
278KB
-
Sample
230505-xgh74aeh79
-
MD5
a55f9f9e6842e250847a2c4c5737812f
-
SHA1
48eeb359fc1fb9daf72139b87b8eb62b3e09f7e8
-
SHA256
661ae25c0714cc7d2bbc3988fa27317a1971804d3d91f06685b0d19c4b0e6399
-
SHA512
66404fa5c4ab1ba7c6e6bfe764e10d1a2870b07d5197bb264e5554a67cbbe980733c93fb2da6ef6a33161970dc5848c2103869feccf9ab56fdde4d65e34aa7cb
-
SSDEEP
3072:fYGXs9oxpmul5LNE8NA88LI78UFfolZMDHNIJ7gcv4SaREevMqM0Z9MB5YydGSJ1:bbxEQcY8UxoqHGJ9yREkMf0EGSJxPdE
Static task
static1
Behavioral task
behavioral1
Sample
a55f9f9e6842e250847a2c4c5737812f.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
a55f9f9e6842e250847a2c4c5737812f.exe
Resource
win10v2004-20230220-en
Malware Config
Extracted
rhadamanthys
http://179.43.142.201/img/favicon.png
Targets
-
-
Target
a55f9f9e6842e250847a2c4c5737812f.exe.bin
-
Size
278KB
-
MD5
a55f9f9e6842e250847a2c4c5737812f
-
SHA1
48eeb359fc1fb9daf72139b87b8eb62b3e09f7e8
-
SHA256
661ae25c0714cc7d2bbc3988fa27317a1971804d3d91f06685b0d19c4b0e6399
-
SHA512
66404fa5c4ab1ba7c6e6bfe764e10d1a2870b07d5197bb264e5554a67cbbe980733c93fb2da6ef6a33161970dc5848c2103869feccf9ab56fdde4d65e34aa7cb
-
SSDEEP
3072:fYGXs9oxpmul5LNE8NA88LI78UFfolZMDHNIJ7gcv4SaREevMqM0Z9MB5YydGSJ1:bbxEQcY8UxoqHGJ9yREkMf0EGSJxPdE
Score10/10-
Detect rhadamanthys stealer shellcode
-
Rhadamanthys
Rhadamanthys is an info stealer written in C++ first seen in August 2022.
-