General

  • Target

    b8f006b4ea07b91e3fb77a79ca4719f02400fd7690e92524c9d88acfefff06f4

  • Size

    364KB

  • Sample

    230505-yazf6shg75

  • MD5

    37fd6cd8acdffa835b2d78c16b6d83e9

  • SHA1

    78cd0c07064c0fdad269c444b52c2632d1d816b3

  • SHA256

    b8f006b4ea07b91e3fb77a79ca4719f02400fd7690e92524c9d88acfefff06f4

  • SHA512

    ab16b18e61308f01e18e3efc30ae5f337708afa8f5fc9538d95b5b333898bf5ffd184a9099f64395a83bb37683d7159c7ebb2a9f357c77da657405aee34cb696

  • SSDEEP

    6144:VdV2256v9Ziw09RmKaj6tTZqCKhzrC2K:VO256Fww0bmKaj6tTZqtC2K

Score
10/10

Malware Config

Extracted

Family

rhadamanthys

C2

http://179.43.142.201/img/favicon.png

Targets

    • Target

      b8f006b4ea07b91e3fb77a79ca4719f02400fd7690e92524c9d88acfefff06f4

    • Size

      364KB

    • MD5

      37fd6cd8acdffa835b2d78c16b6d83e9

    • SHA1

      78cd0c07064c0fdad269c444b52c2632d1d816b3

    • SHA256

      b8f006b4ea07b91e3fb77a79ca4719f02400fd7690e92524c9d88acfefff06f4

    • SHA512

      ab16b18e61308f01e18e3efc30ae5f337708afa8f5fc9538d95b5b333898bf5ffd184a9099f64395a83bb37683d7159c7ebb2a9f357c77da657405aee34cb696

    • SSDEEP

      6144:VdV2256v9Ziw09RmKaj6tTZqCKhzrC2K:VO256Fww0bmKaj6tTZqtC2K

    Score
    10/10
    • Detect rhadamanthys stealer shellcode

    • Rhadamanthys

      Rhadamanthys is an info stealer written in C++ first seen in August 2022.

MITRE ATT&CK Matrix

Tasks