General

  • Target

    DEV.exe

  • Size

    179KB

  • MD5

    9775295a19eff01e8ccb2d7f5702569d

  • SHA1

    8b069c942631ac9b642031005ba20f03324ecc84

  • SHA256

    7aadc76471387981789a8aa1d2c34ed48b79f84febe3160feea5f32c4aaaceb7

  • SHA512

    fdc7ce7da4ca98aa67ea9652c13e1d316f4bad8f7ae07224754fdffc559fd93b3e5488aa13e622610c7b3db22261183bffedccde6a76147e5cfc898a0b5a3733

  • SSDEEP

    3072:bwevYpKTDMDUjfuuE46lC4PQyfHU6Ig4cjnjFRpbll/XbqefxlS3ETgmBN8vqI5L:sevY8mCu3wB4HzlrzPOefxoEBK7

Score
10/10

Malware Config

Extracted

Family

rhadamanthys

C2

http://195.3.223.120/blob/fulliano.tk

Signatures

  • Rhadamanthys family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • DEV.exe
    .exe windows x86

    f214c5f744673db93dec4b219265fbc2


    Headers

    Imports

    Sections