Overview

overview

10

Static

static

3

setup.exe

windows7-x64

10

setup.exe

windows10-2004-x64

10

Resubmissions

10-05-2023 00:46

230510-a43hxsde69 10

10-05-2023 00:39

230510-azl1dafd5t 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    setup.exe

  • Size

    365KB

  • Sample

    230510-azl1dafd5t

  • MD5

    0bf4802d6222aa624709e90092916233

  • SHA1

    1434523ea8f30bfdd051570badb258f36c8eaa05

  • SHA256

    032e861138d0a304d5a51bc7614f867b04d558596be03cf69ff9fd63098bc46d

  • SHA512

    1cb68f4591bc40ba544cc2fa19fa9aaa59e6a497d075b85f2c3dd47f601745d1f500ef9a4286ebd32dc12880529ce850656382c95f7ac060e70c7e89686490c7

  • SSDEEP

    6144:98Q7t/ifdZQR1u4U3QScXaviBoGnGoTCOhwK:mS/if6VScXaaagCzK

Score
10/10
rhadamanthysstealer

Malware Config

Extracted

Family

rhadamanthys

C2

http://179.43.142.201/img/favicon.png

Targets

    • Target

      setup.exe

    • Size

      365KB

    • MD5

      0bf4802d6222aa624709e90092916233

    • SHA1

      1434523ea8f30bfdd051570badb258f36c8eaa05

    • SHA256

      032e861138d0a304d5a51bc7614f867b04d558596be03cf69ff9fd63098bc46d

    • SHA512

      1cb68f4591bc40ba544cc2fa19fa9aaa59e6a497d075b85f2c3dd47f601745d1f500ef9a4286ebd32dc12880529ce850656382c95f7ac060e70c7e89686490c7

    • SSDEEP

      6144:98Q7t/ifdZQR1u4U3QScXaviBoGnGoTCOhwK:mS/if6VScXaaagCzK

    Score
    10/10
    rhadamanthysstealer

    • Detect rhadamanthys stealer shellcode

    • Rhadamanthys

      Rhadamanthys is an info stealer written in C++ first seen in August 2022.

      stealerrhadamanthys
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks