Overview

overview

10

Static

static

10

LK2.exe

windows7-x64

10

LK2.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    LK2.exe

  • Size

    179KB

  • Sample

    230630-pjvd5sag85

  • MD5

    27e018559bc0216c98fb188d3a3a8209

  • SHA1

    d0b477cf1d81182a2c0357432bd6b3e7a2bc43d4

  • SHA256

    563458d0d35d3e4a7809630809229fbe2977eabeb8639ceb677426308c156a3c

  • SHA512

    8ce3eccbef889189bebf0fd5cf36c257e4eba8344dc87d95d944718fd9bb16a833e951304420db0c46a9f4a8d050090b2758b709b5bacc47ed27b9a133b7e6be

  • SSDEEP

    3072:bwevYpKTDMDUqfuuE46lC4PQyfHU6Ig4cjnjFRpbll/XbqefxlS3ETgmBN8vqI5L:sevY8mlu3wB4HzlrzPOefxoEBK7

Score
10/10
rhadamanthysstealer

Malware Config

Extracted

Family

rhadamanthys

C2

http://195.3.223.120/blob/gotto.tk

Targets

    • Target

      LK2.exe

    • Size

      179KB

    • MD5

      27e018559bc0216c98fb188d3a3a8209

    • SHA1

      d0b477cf1d81182a2c0357432bd6b3e7a2bc43d4

    • SHA256

      563458d0d35d3e4a7809630809229fbe2977eabeb8639ceb677426308c156a3c

    • SHA512

      8ce3eccbef889189bebf0fd5cf36c257e4eba8344dc87d95d944718fd9bb16a833e951304420db0c46a9f4a8d050090b2758b709b5bacc47ed27b9a133b7e6be

    • SSDEEP

      3072:bwevYpKTDMDUqfuuE46lC4PQyfHU6Ig4cjnjFRpbll/XbqefxlS3ETgmBN8vqI5L:sevY8mlu3wB4HzlrzPOefxoEBK7

    Score
    10/10
    rhadamanthysstealer

    • Detect rhadamanthys stealer shellcode

    • Rhadamanthys

      Rhadamanthys is an info stealer written in C++ first seen in August 2022.

      stealerrhadamanthys
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks