Overview

overview

10

Static

static

3

c71c91c8c6...d4.exe

windows7-x64

10

c71c91c8c6...d4.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    97a2299be5863c0b77368f0d5a27f8b9.bin

  • Size

    243KB

  • Sample

    230510-b8py3aff8x

  • MD5

    74b5dc0490185112b4bd9c13151d33a8

  • SHA1

    b5ff36468b1cdcf803c4ad5666fd1a0c6109c41c

  • SHA256

    da4d557ad7af4593a364c091a696dd8492fca316023fdf64fe13d97b36037da8

  • SHA512

    8be7f38db337807983897ae9360a7a8bdc8f663e70f4c9dab00e84d67e5a4f510557c27bdd0715f4b49c338d11d7547eff6d94770e1df33549012546e6c99e40

  • SSDEEP

    6144:wgIkhPxdKiTZHq9L3vc4+y95uoBShygTNVgnBxb+cm:zI6Pxd3HGLvc4+y9dMhvNm/b4

Score
10/10
rhadamanthysstealer

Malware Config

Extracted

Family

rhadamanthys

C2

http://179.43.142.201/img/favicon.png

Targets

    • Target

      c71c91c8c6cdb4cc17f2777a9078e0863f1e9ec76555043e85286af14fe275d4.exe

    • Size

      412KB

    • MD5

      97a2299be5863c0b77368f0d5a27f8b9

    • SHA1

      dace7860b2b6fd3c2f85916b640471adf810c6bc

    • SHA256

      c71c91c8c6cdb4cc17f2777a9078e0863f1e9ec76555043e85286af14fe275d4

    • SHA512

      c36c6564267c529812a985302dc376dd072876ffd0079eb63cb7d00fab9b800317d6d1bbd2bc9e2b4c381b38d9c18c7ee1c2a246d803c78d31b42aea4fc1f78f

    • SSDEEP

      6144:iYjwAoZ9Y5K1DptQBX/v6HihkfauL2nQEVNO:7jwACYM1DpGBXtTuL2QaQ

    Score
    10/10
    rhadamanthysstealer

    • Detect rhadamanthys stealer shellcode

    • Rhadamanthys

      Rhadamanthys is an info stealer written in C++ first seen in August 2022.

      stealerrhadamanthys
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks