Overview

overview

10

Static

static

3

ef4a67b340...ce.exe

windows7-x64

10

ef4a67b340...ce.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ef4a67b340f9516a6c0522fb3ea6d3ce.exe.bin

  • Size

    354KB

  • Sample

    230505-y6w1xscg33

  • MD5

    ef4a67b340f9516a6c0522fb3ea6d3ce

  • SHA1

    51a17cd3e3a45456c91cf6d7245ecfc7b7579c48

  • SHA256

    9965b1d2226f47e2a8387830b2773ce026f41d202f0dab87a782158378c5c13e

  • SHA512

    ac9d35b76b991e90b34b0651acda65b18579868138efb4a98676869109465556f0712b157e8bbe5971cfafdf09e2d4340d9386a7eee6c6f7e4ad3bf865f78956

  • SSDEEP

    6144:wLwh55Mc5K05Uquzpj/COBLPzovi1dNSlU1g:Wwh5u2KUUVr7BX/1dN

Score
10/10
rhadamanthysstealer

Malware Config

Extracted

Family

rhadamanthys

C2

http://179.43.142.201/img/favicon.png

Targets

    • Target

      ef4a67b340f9516a6c0522fb3ea6d3ce.exe.bin

    • Size

      354KB

    • MD5

      ef4a67b340f9516a6c0522fb3ea6d3ce

    • SHA1

      51a17cd3e3a45456c91cf6d7245ecfc7b7579c48

    • SHA256

      9965b1d2226f47e2a8387830b2773ce026f41d202f0dab87a782158378c5c13e

    • SHA512

      ac9d35b76b991e90b34b0651acda65b18579868138efb4a98676869109465556f0712b157e8bbe5971cfafdf09e2d4340d9386a7eee6c6f7e4ad3bf865f78956

    • SSDEEP

      6144:wLwh55Mc5K05Uquzpj/COBLPzovi1dNSlU1g:Wwh5u2KUUVr7BX/1dN

    Score
    10/10
    rhadamanthysstealer

    • Detect rhadamanthys stealer shellcode

    • Rhadamanthys

      Rhadamanthys is an info stealer written in C++ first seen in August 2022.

      stealerrhadamanthys
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks