Overview

overview

10

Static

static

10

DEV.exe

windows7-x64

10

DEV.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    DEV.exe

  • Size

    179KB

  • Sample

    230630-pjv1nsbf91

  • MD5

    9775295a19eff01e8ccb2d7f5702569d

  • SHA1

    8b069c942631ac9b642031005ba20f03324ecc84

  • SHA256

    7aadc76471387981789a8aa1d2c34ed48b79f84febe3160feea5f32c4aaaceb7

  • SHA512

    fdc7ce7da4ca98aa67ea9652c13e1d316f4bad8f7ae07224754fdffc559fd93b3e5488aa13e622610c7b3db22261183bffedccde6a76147e5cfc898a0b5a3733

  • SSDEEP

    3072:bwevYpKTDMDUjfuuE46lC4PQyfHU6Ig4cjnjFRpbll/XbqefxlS3ETgmBN8vqI5L:sevY8mCu3wB4HzlrzPOefxoEBK7

Score
10/10
rhadamanthysstealer

Malware Config

Extracted

Family

rhadamanthys

C2

http://195.3.223.120/blob/fulliano.tk

Targets

    • Target

      DEV.exe

    • Size

      179KB

    • MD5

      9775295a19eff01e8ccb2d7f5702569d

    • SHA1

      8b069c942631ac9b642031005ba20f03324ecc84

    • SHA256

      7aadc76471387981789a8aa1d2c34ed48b79f84febe3160feea5f32c4aaaceb7

    • SHA512

      fdc7ce7da4ca98aa67ea9652c13e1d316f4bad8f7ae07224754fdffc559fd93b3e5488aa13e622610c7b3db22261183bffedccde6a76147e5cfc898a0b5a3733

    • SSDEEP

      3072:bwevYpKTDMDUjfuuE46lC4PQyfHU6Ig4cjnjFRpbll/XbqefxlS3ETgmBN8vqI5L:sevY8mCu3wB4HzlrzPOefxoEBK7

    Score
    10/10
    rhadamanthysstealer

    • Detect rhadamanthys stealer shellcode

    • Rhadamanthys

      Rhadamanthys is an info stealer written in C++ first seen in August 2022.

      stealerrhadamanthys
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks