General

  • Target

    efe91a539243b544a7357eda78b29b768e12012466f2705d8b2ba77531bcc9ad.bin

  • Size

    298KB

  • Sample

    230505-y69l1scg66

  • MD5

    3e23048d1d85a5e5de6e6edb75423c0c

  • SHA1

    c4a7514c134c2950c5d78248224d658ae24a5d42

  • SHA256

    efe91a539243b544a7357eda78b29b768e12012466f2705d8b2ba77531bcc9ad

  • SHA512

    cbd2ff44d2c59ade4c8742554292d1c7cee7ffaea00d5dbbf3b23175ee13cb780be6fb64379a97ecdb6a09473ae0cc4370982bb1a93de16268f34a1ee11c2188

  • SSDEEP

    6144:LXT5+lmqT7Rs6SlqycSsnWqihMdKBlgpf3PY494:Yld7hSlqyNDqih653QS4

Score
10/10

Malware Config

Extracted

Family

rhadamanthys

C2

http://179.43.142.201/img/favicon.png

Targets

    • Target

      efe91a539243b544a7357eda78b29b768e12012466f2705d8b2ba77531bcc9ad.bin

    • Size

      298KB

    • MD5

      3e23048d1d85a5e5de6e6edb75423c0c

    • SHA1

      c4a7514c134c2950c5d78248224d658ae24a5d42

    • SHA256

      efe91a539243b544a7357eda78b29b768e12012466f2705d8b2ba77531bcc9ad

    • SHA512

      cbd2ff44d2c59ade4c8742554292d1c7cee7ffaea00d5dbbf3b23175ee13cb780be6fb64379a97ecdb6a09473ae0cc4370982bb1a93de16268f34a1ee11c2188

    • SSDEEP

      6144:LXT5+lmqT7Rs6SlqycSsnWqihMdKBlgpf3PY494:Yld7hSlqyNDqih653QS4

    Score
    10/10
    • Detect rhadamanthys stealer shellcode

    • Rhadamanthys

      Rhadamanthys is an info stealer written in C++ first seen in August 2022.

MITRE ATT&CK Matrix

Tasks