General

  • Target

    597a4ade5d862166430037813118d0e94d993d87490fed195c0ade3fb6ab3e42

  • Size

    406KB

  • Sample

    230508-ztkmsscg22

  • MD5

    f916846ad99f77ebb27edaa95f085566

  • SHA1

    ba64567e237d5868e987ac03017d559ab93ab9c7

  • SHA256

    597a4ade5d862166430037813118d0e94d993d87490fed195c0ade3fb6ab3e42

  • SHA512

    7d45ebc2e7cec9f736099f75ec3e7799b969ced21922fa3e2d3d9ef2ee52006d4450eeb417bd0b8d30b5877c3ea6dd8d66fa3e30e9e6824316ceeb38c8e30722

  • SSDEEP

    6144:d+7dSKLUtZrktN4X3/QUTjqWLwt3HuK+NP4:EdSUU4b0PpTj7wJHp+y

Score
10/10

Malware Config

Extracted

Family

rhadamanthys

C2

http://179.43.142.201/img/favicon.png

Targets

    • Target

      597a4ade5d862166430037813118d0e94d993d87490fed195c0ade3fb6ab3e42

    • Size

      406KB

    • MD5

      f916846ad99f77ebb27edaa95f085566

    • SHA1

      ba64567e237d5868e987ac03017d559ab93ab9c7

    • SHA256

      597a4ade5d862166430037813118d0e94d993d87490fed195c0ade3fb6ab3e42

    • SHA512

      7d45ebc2e7cec9f736099f75ec3e7799b969ced21922fa3e2d3d9ef2ee52006d4450eeb417bd0b8d30b5877c3ea6dd8d66fa3e30e9e6824316ceeb38c8e30722

    • SSDEEP

      6144:d+7dSKLUtZrktN4X3/QUTjqWLwt3HuK+NP4:EdSUU4b0PpTj7wJHp+y

    Score
    10/10
    • Detect rhadamanthys stealer shellcode

    • Rhadamanthys

      Rhadamanthys is an info stealer written in C++ first seen in August 2022.

MITRE ATT&CK Matrix

Tasks