General

  • Target

    LWClient.rar

  • Size

    237KB

  • MD5

    f57e80963cef749018ce233f619bcd1c

  • SHA1

    1f0a7f68ebbe417d610dd2a76d1374fa288db32c

  • SHA256

    1e7baed6e127accb731c667808a05a6abcdc2db39e69fef3ad453bc76af0347d

  • SHA512

    c13eb72ce7a5fba32ac1600bb4173027506dea13e0134b3ef5702f32ef73ce2c4671a6e8a654e0582d16173e3a19d6868c99e4f00244dd36742aa06cb2ae3d5b

  • SSDEEP

    6144:qGu1L/dS7hcMiM8oCH3rD9bFufV9EXVvg1IOE2BclY6rHDAS:Xu1zdIcMmpQd9+hy+jAS

Score
10/10

Malware Config

Extracted

Family

rhadamanthys

C2

https://185.125.50.38:3034/739bd3e91cd40ca83/lem.api

Signatures

  • Rhadamanthys family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • LWClient.rar
    .rar
  • LWClient.exe
    .exe windows:6 windows x86 arch:x86

    be49a2411263045f8ee0c442783b5f83


    Headers

    Imports

    Sections