General

  • Target

    ac2e0143f882750bad9863dbbeb0e6e2c9f1076f0deff7d39e24a723492a4988.bin

  • Size

    410KB

  • Sample

    230505-xlbc2she3x

  • MD5

    6bbe23d9fa50333b9267f68fa02073c4

  • SHA1

    39a6435043fd10d8ceb5b8a5cd1d25a7b640aa3d

  • SHA256

    ac2e0143f882750bad9863dbbeb0e6e2c9f1076f0deff7d39e24a723492a4988

  • SHA512

    700e06e7497ed5e5fb6e6101ad33346b5e255cbefeccf986e1bcc9f63bb1bd7bd82169ca407c4ae50cca0d489c1ce4d5de2b6217efd048c7ac2fd31481942b07

  • SSDEEP

    6144:h1J/l9Bm2EfXmgFTl+ZALvXal+OdjGew2+WpiCfq:hP/PBm2EJ5SALCosyewxWAC

Score
10/10

Malware Config

Extracted

Family

rhadamanthys

C2

http://179.43.142.201/img/favicon.png

Targets

    • Target

      ac2e0143f882750bad9863dbbeb0e6e2c9f1076f0deff7d39e24a723492a4988.bin

    • Size

      410KB

    • MD5

      6bbe23d9fa50333b9267f68fa02073c4

    • SHA1

      39a6435043fd10d8ceb5b8a5cd1d25a7b640aa3d

    • SHA256

      ac2e0143f882750bad9863dbbeb0e6e2c9f1076f0deff7d39e24a723492a4988

    • SHA512

      700e06e7497ed5e5fb6e6101ad33346b5e255cbefeccf986e1bcc9f63bb1bd7bd82169ca407c4ae50cca0d489c1ce4d5de2b6217efd048c7ac2fd31481942b07

    • SSDEEP

      6144:h1J/l9Bm2EfXmgFTl+ZALvXal+OdjGew2+WpiCfq:hP/PBm2EJ5SALCosyewxWAC

    Score
    10/10
    • Detect rhadamanthys stealer shellcode

    • Rhadamanthys

      Rhadamanthys is an info stealer written in C++ first seen in August 2022.

MITRE ATT&CK Matrix

Tasks