General
-
Target
2972-2-0x0000000000A80000-0x0000000000B03000-memory.dmp
-
Size
524KB
-
MD5
87dc081a2a706f66333b2eefa83d2fd5
-
SHA1
e87c8117a133e96cc2b1640e39e408e9735a8379
-
SHA256
4575e0cc175fe8062123d5043ac3e40b3f8d7834305b87be392bf545f4e06151
-
SHA512
39681904a5754bf1a515702896ac15d18ce157533463b2ba96ac8704159aae1c40f04660afcdb77654a752a943344bb490f1c3e1881fd5242f27553948c25c3a
-
SSDEEP
6144:uAYM3ZEWqf/qwPF7LR5W8ZJ74zmRiOFBbMh9q/JS53ChNeKUmNcaRXLmjZoS:uWBqf/qq3R5W8ZB4zmRzbaMMtaRXIoS
Score
10/10
Malware Config
Extracted
Family
rhadamanthys
C2
https://deadmunky.nl:3736/083f339e93162/kuegsocf.6wn8t
Signatures
-
Rhadamanthys family
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2972-2-0x0000000000A80000-0x0000000000B03000-memory.dmp
Headers
Sections