General

  • Target

    f0f42ceb1388d5dbd62f7a4f3234cbae.exe.bin

  • Size

    397KB

  • Sample

    230505-y75z8ach44

  • MD5

    f0f42ceb1388d5dbd62f7a4f3234cbae

  • SHA1

    1da98aecd2cb2271f7b295d4f13a61ee675965c7

  • SHA256

    e70d5129aae648f8bc3beb57cffc7f655c0ddd92a810ef9f1e4540b2d4d92c51

  • SHA512

    9ee8f81fe12dc37d1c389fd136604e919dd3d306849dd7063dc49c5bc8dfcdeb6e17c3e3c1e1d83caa37b461d2f2211f346d3f5ca444ccc9d41f6399374373a5

  • SSDEEP

    6144:IW6ocXcTaZvPbSJfduKXtxxKEBJR1cvcMVYX4mj:IW67caZvj0cKnxFmcMeIQ

Score
10/10

Malware Config

Extracted

Family

rhadamanthys

C2

http://179.43.142.201/img/favicon.png

Targets

    • Target

      f0f42ceb1388d5dbd62f7a4f3234cbae.exe.bin

    • Size

      397KB

    • MD5

      f0f42ceb1388d5dbd62f7a4f3234cbae

    • SHA1

      1da98aecd2cb2271f7b295d4f13a61ee675965c7

    • SHA256

      e70d5129aae648f8bc3beb57cffc7f655c0ddd92a810ef9f1e4540b2d4d92c51

    • SHA512

      9ee8f81fe12dc37d1c389fd136604e919dd3d306849dd7063dc49c5bc8dfcdeb6e17c3e3c1e1d83caa37b461d2f2211f346d3f5ca444ccc9d41f6399374373a5

    • SSDEEP

      6144:IW6ocXcTaZvPbSJfduKXtxxKEBJR1cvcMVYX4mj:IW67caZvj0cKnxFmcMeIQ

    Score
    10/10
    • Detect rhadamanthys stealer shellcode

    • Rhadamanthys

      Rhadamanthys is an info stealer written in C++ first seen in August 2022.

MITRE ATT&CK Matrix

Tasks