General
-
Target
bb.exe
-
Size
479KB
-
Sample
240820-r6q2casajl
-
MD5
b2dc71aeb389c4c5f6b3699163ea1d0f
-
SHA1
578239aefa2c93cae72624754146e8f3e275fa5e
-
SHA256
bb8bbcc948e8dca2e5a0270c41c062a29994a2d9b51e820ed74d9b6e2a01ddcf
-
SHA512
2ac4ebf5ca226384b299167c58aaf4e24ab4a2a4897ef914871803df23794a44a1c9ab638b1714653cd767e566fb5bd0745ebc26f0dc5a3be4e345e6ef5b9461
-
SSDEEP
6144:pTNlPsSiE0grIlHAjNL7SVAtKZnbr8qz6xzS06d17GQxAAXcpGZ5wIzkyOD+lRXs:pFR0gsAjNLJtQbr8w6xely1JcXgDsLm
Behavioral task
behavioral1
Sample
bb.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
bb.exe
Resource
win10v2004-20240802-en
Malware Config
Extracted
rhadamanthys
https://104.129.128.188:9537/eab5524bf158f61e657/3wdrct36.6fdj7
Targets
-
-
Target
bb.exe
-
Size
479KB
-
MD5
b2dc71aeb389c4c5f6b3699163ea1d0f
-
SHA1
578239aefa2c93cae72624754146e8f3e275fa5e
-
SHA256
bb8bbcc948e8dca2e5a0270c41c062a29994a2d9b51e820ed74d9b6e2a01ddcf
-
SHA512
2ac4ebf5ca226384b299167c58aaf4e24ab4a2a4897ef914871803df23794a44a1c9ab638b1714653cd767e566fb5bd0745ebc26f0dc5a3be4e345e6ef5b9461
-
SSDEEP
6144:pTNlPsSiE0grIlHAjNL7SVAtKZnbr8qz6xzS06d17GQxAAXcpGZ5wIzkyOD+lRXs:pFR0gsAjNLJtQbr8w6xely1JcXgDsLm
Score10/10-
Rhadamanthys
Rhadamanthys is an info stealer written in C++ first seen in August 2022.
-
Deletes itself
-