General

  • Target

    664b543fd8b49e8ef490a381027822a8.exe

  • Size

    389KB

  • Sample

    230508-qbhk2sce6x

  • MD5

    664b543fd8b49e8ef490a381027822a8

  • SHA1

    97eefcb03d378e46e929351a23b890ea0dc70536

  • SHA256

    9a1ed7d76de14600ab79f7d60e45dc18d857c1ce0d2383df629d0fbe91e6ea0c

  • SHA512

    a794b5abb6f8c86a0f2a0d1a2d962b79fade7fa1f3009637be11a8f5c9666fc2da4dd1476a4af601b63d55f0e996c4043743554a2ee13faf933b34a66f1832f1

  • SSDEEP

    6144:gBWjAGbF0D3dLJ8WuwnzPpyGJNuHyzMdTrSMEri2HzA:ggjAGbF0lJ8izBzySzMdHSMGi+8

Score
10/10

Malware Config

Extracted

Family

rhadamanthys

C2

http://179.43.142.201/img/favicon.png

Targets

    • Target

      664b543fd8b49e8ef490a381027822a8.exe

    • Size

      389KB

    • MD5

      664b543fd8b49e8ef490a381027822a8

    • SHA1

      97eefcb03d378e46e929351a23b890ea0dc70536

    • SHA256

      9a1ed7d76de14600ab79f7d60e45dc18d857c1ce0d2383df629d0fbe91e6ea0c

    • SHA512

      a794b5abb6f8c86a0f2a0d1a2d962b79fade7fa1f3009637be11a8f5c9666fc2da4dd1476a4af601b63d55f0e996c4043743554a2ee13faf933b34a66f1832f1

    • SSDEEP

      6144:gBWjAGbF0D3dLJ8WuwnzPpyGJNuHyzMdTrSMEri2HzA:ggjAGbF0lJ8izBzySzMdHSMGi+8

    Score
    10/10
    • Detect rhadamanthys stealer shellcode

    • Rhadamanthys

      Rhadamanthys is an info stealer written in C++ first seen in August 2022.

MITRE ATT&CK Matrix

Tasks