Overview

overview

10

Static

static

3

3afa8aa568...68.exe

windows7-x64

10

3afa8aa568...68.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    45d4fe22891d51f31bfa2f4c986802bc.bin

  • Size

    243KB

  • Sample

    230510-bstmbaff2w

  • MD5

    8203539c454e155c575a83e2c2c1e89b

  • SHA1

    0c13ee383f723b9714b09937bfcfcd3283b7e615

  • SHA256

    ce831fdda7df4efbc1b5d78e6c9d9f783de79965a6db96592525de73c2ee58ed

  • SHA512

    22dd7ea6699246048aa29f04bbc3097c12874b8ad26505bb1f61078a1f6992e58af853b5b118cf2e6e4047a8e26b65660ba4ec664055528742302e16e76e00d9

  • SSDEEP

    6144:WVFOLbrttc5fAUF5Ikiws19ejVt5aJyTH:WVF2wJAk5pOIjXS6

Score
10/10
rhadamanthysstealer

Malware Config

Extracted

Family

rhadamanthys

C2

http://179.43.142.201/img/favicon.png

Targets

    • Target

      3afa8aa568f26c6dcc9e6b32f376def4d0f54912ca431490e3b6558044fb2368.exe

    • Size

      411KB

    • MD5

      45d4fe22891d51f31bfa2f4c986802bc

    • SHA1

      13214cef92635200f74f68a35e91fcaa7d83fcdd

    • SHA256

      3afa8aa568f26c6dcc9e6b32f376def4d0f54912ca431490e3b6558044fb2368

    • SHA512

      5eacada96734fd14be5a85532c9cc2d3c7a8934f202afb7001a4309b3df1002475dcf978dfc1594f137dc67ffa640208260f7524023b9fe9c235ff2ec820d676

    • SSDEEP

      6144:w+6NrfXS17AktlYEk+fySN4nan2o0wVr920GmowUO:x6NrfUtlvk+qSNQo1z20Gml

    Score
    10/10
    rhadamanthysstealer

    • Detect rhadamanthys stealer shellcode

    • Rhadamanthys

      Rhadamanthys is an info stealer written in C++ first seen in August 2022.

      stealerrhadamanthys
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks