General

  • Target

    rh_0.4.9.exe

  • Size

    456KB

  • MD5

    5adcfa28ba6d424847d12c246c7b19f8

  • SHA1

    ae451b00d9ef359148f68d8ec0a3dac0ba355f9f

  • SHA256

    91ae301f30a2e92e923283a89634ad17786762f72437ba460d790cd66e1b0a1e

  • SHA512

    add767c03b1fade0970c841d0a785fec202415e21809acfcfb973fbc2269837467ad3eb22a090d0af9a362edc1a1aa3033be58ff7a813e2403501ca01c9d7254

  • SSDEEP

    6144:2uWP/BtSnurUylcrGYlnIttxv8HbcLgsd1Gus5psdrvV44dixP+MHDkBYdxtG9+O:2uWP/BZUyoLu8Agsmxwrvejkd2

Score
10/10

Malware Config

Extracted

Family

rhadamanthys

C2

https://192.168.18.129:4108/90be167a0fdf71/ojp5obdd.8kkgo

Signatures

  • Rhadamanthys family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • rh_0.4.9.exe
    .exe windows:4 windows x86 arch:x86

    eca0c30b65294d02a6c6180a6b323b58


    Headers

    Imports

    Sections