Overview

overview

10

Static

static

10

ProjectXOX...OX.exe

windows10-2004-x64

10

Resubmissions

27/11/2024, 09:57

241127-ly19fsymdx 10

16/10/2023, 10:46

231016-mt89yafe46 10

Sharing

Copy URL Twitter E-mail

General

  • Target

    ProjectXOX.zip

  • Size

    5.6MB

  • Sample

    241127-ly19fsymdx

  • MD5

    99b3e545a89fd0ef7aec538e53e5a71d

  • SHA1

    02fd15bc71c76ef233102b04615701cdb6e68857

  • SHA256

    fcb7deadf5624935d8d694846aae541f192d6aa5d30411f3398d72bbb134576c

  • SHA512

    a520f27c8431792f4aff90437a8454f98062ee2df75935b86058d700dc25a789ee2e061be18a52ddc3d60c90d7ab73293cfffefb7c18143618c97c8343bf5fa0

  • SSDEEP

    98304:pgUgLcU+SDLHA3l8w8/qgsLrVhAzFgbmhqhqR4D3pPaGH/RDY02CS:pgU8LHA3lHbgsLrV2F8mhqx3JakDY02/

Score
10/10
rhadamanthysdiscoverystealer

Malware Config

Extracted

Family

rhadamanthys

C2

https://195.3.223.126:4287/9d0dc091285eb9fbf2e/gpxwtjwv.b8agu

Targets

    • Target

      ProjectXOX/ProjectXOX.exe

    • Size

      456KB

    • MD5

      0eb3728b018f23cd43e0199e2033d684

    • SHA1

      18fd395f29e4fb7ef69e98a68851268227f8e9cb

    • SHA256

      5f11c613c5875c650c11c493a74971d0f741ac890951beca90e38e8c397ca959

    • SHA512

      38b295023ebbef499a18144dadfea8d9f10cb877c2b88f96083eba64eb1f3fde7340a5310d47c6ad2c320e8217c3fbf69b3176a5b85a9b356e8c8fca93c93e16

    • SSDEEP

      6144:2uWP/BtSnurUylcrGYlnIttxv8HbcLgsd1Gus5psdrvV44dixP+MHDkBYdxtG9+e:2uWP/BZUyoLu8Agsmxwrvejkd2

    Score
    10/10
    rhadamanthysdiscoverystealer

    • Detect rhadamanthys stealer shellcode

    • Rhadamanthys

      Rhadamanthys is an info stealer written in C++ first seen in August 2022.

      stealerrhadamanthys

    • Rhadamanthys family

      rhadamanthys
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks