rhadamanthys

General

Target
PRIVATE-DDOS-Tool-main.zip
Size 1.3MB
Sample240412-2wtplafg63
SHA256 55d1a143d5c147f516c8d9db202d20c88c9a271ac1068caefb4dd8f6851d32a7
MD5 13f2daf7d87adbdf6acb502955f1ec2a
SHA1 d501caad720dd45cf528902a36002e6e0a822d72
SHA512 06e2c441b71ad2bf63d2e6f81c0f0beb5d5e5689f6268e58971ad9eccd193524c543feb8b8edf102fd18902994acd32f545202e228741abd4335634f50c70a8a
SSDEEP 24576:rPSs/gIGBg/uVyaPnsTLuk0p6q/KzScsgW/UOun2Lc3jngwsXcyPTi7dCRB:r7Y5Ba9knsTL1qS+c3W/Uxtngw6TKw
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

rhadamanthys stealer

Malware Config

Targets

- Target
  PRIVATE-DDOS-Tool-main.zip
- Size 1.3MB
- SHA256 55d1a143d5c147f516c8d9db202d20c88c9a271ac1068caefb4dd8f6851d32a7
- MD5 13f2daf7d87adbdf6acb502955f1ec2a
- SHA1 d501caad720dd45cf528902a36002e6e0a822d72
- SHA512 06e2c441b71ad2bf63d2e6f81c0f0beb5d5e5689f6268e58971ad9eccd193524c543feb8b8edf102fd18902994acd32f545202e228741abd4335634f50c70a8a
- SSDEEP 24576:rPSs/gIGBg/uVyaPnsTLuk0p6q/KzScsgW/UOun2Lc3jngwsXcyPTi7dCRB:r7Y5Ba9knsTL1qS+c3W/Uxtngw6TKw
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral1
- Target
  PRIVATE-DDOS-Tool-main/D3DX9_43.dll
- Size 2.3MB
- SHA256 84b900dbd7fa978d6e0caee26fc54f2f61d92c9c75d10b35f00e3e82cd1d67b4
- MD5 7160fc226391c0b50c85571fa1a546e5
- SHA1 2bf450850a522a09e8d1ce0f1e443d86d934f4ad
- SHA512 dfab0eaab8c40fb80369e150cd36ff2224f3a6baf713044f47182961cd501fe4222007f9a93753ac757f64513c707c68a5cf4ae914e23fecaa4656a68df8349b
- SSDEEP 49152:dbCJsk4VlPXA+15Om5wxw9Qsi55K+31BhZ64nW:YIIBnW
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral2
- Target
  PRIVATE-DDOS-Tool-main/Settings.bat
- Size 11B
- SHA256 19148660e2c830c9b826b4f21d7cfeec034869b539229b7f38f2eddea6e7cb32
- MD5 7e5c936e44ba6e938f9e3ee0f66ec674
- SHA1 f6fdaa4b2511fee00d83b67aa30cbe66277ae2f4
- SHA512 6b84ee18c42aa35a62edd7dc0ed15f87d63a9061489f5bffec24ba3e265ebee604e65cfdf72ab8730b53e68efbb41510bf59e3c562702ccad8aa5ab7f5a671f1
- MD5 SHA1 SHA512
Score

1^/10
behavioral3
- Target
  PRIVATE-DDOS-Tool-main/Stresser.exe
- Size 456KB
- SHA256 9950788284df125c7359aeb91435ed24d59359fac6a74ed73774ca31561cc7ae
- MD5 515a0c8be21a5ba836e5687fc2d73333
- SHA1 c52be9d0d37ac1b8d6bc09860e68e9e0615255ab
- SHA512 4e2bd7ce844bba25aff12e2607c4281b59f7579b9407139ef6136ef09282c7afac1c702adebc42f8bd7703fac047fd8b5add34df334bfc04d3518ea483225522
- SSDEEP 6144:2uWP/BtSnurUylcrGYlnIttxv8HbcLgsd1Gus5psdrvV44dixP+MHDkBYdxtG9+V:2uWP/BZUyoLu8Agsmxwrvejkd2
- MD5 SHA1 SHA512 SSDEEP
Score

10^/10

rhadamanthys stealer
- Detect rhadamanthys stealer shellcode
- Rhadamanthys
  Rhadamanthys is an info stealer written in C++ first seen in August 2022.
  stealer rhadamanthys
behavioral4

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

1

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Detect rhadamanthys stealer shellcode

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4