General
-
Target
Loader.exe
-
Size
456KB
-
Sample
241127-lz6wbsvqfn
-
MD5
2b0c2a69b2615e69ce9b5b65847b2598
-
SHA1
586c543344c0c8ce1ef0cdc630363261042fb6a9
-
SHA256
0843a128cf164e945e6b99bda50a7bdb2a57b82b65965190f8d3620d4a8cfa2c
-
SHA512
089246df82e8e671b9fffe2ee3aba21d41a433ca52fabb848975719ad23b8bb07f4fcc5ac4a6d2e715d9a66df78f7cdb51b9083af01e4b2b04558d4a31d5fbdd
-
SSDEEP
6144:2uWP/BtSnurUylcrGYlnIttxv8HbcLgsd1Gus5psdrvV44dixP+MHDkBYdxtG9+9:2uWP/BZUyoLu8Agsmxwrvejkd2
Behavioral task
behavioral1
Sample
Loader.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
Loader.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
rhadamanthys
https://195.3.223.126:4287/9d0dc091285eb9fbf2e/tafg2rr2.ooowj
Targets
-
-
Target
Loader.exe
-
Size
456KB
-
MD5
2b0c2a69b2615e69ce9b5b65847b2598
-
SHA1
586c543344c0c8ce1ef0cdc630363261042fb6a9
-
SHA256
0843a128cf164e945e6b99bda50a7bdb2a57b82b65965190f8d3620d4a8cfa2c
-
SHA512
089246df82e8e671b9fffe2ee3aba21d41a433ca52fabb848975719ad23b8bb07f4fcc5ac4a6d2e715d9a66df78f7cdb51b9083af01e4b2b04558d4a31d5fbdd
-
SSDEEP
6144:2uWP/BtSnurUylcrGYlnIttxv8HbcLgsd1Gus5psdrvV44dixP+MHDkBYdxtG9+9:2uWP/BZUyoLu8Agsmxwrvejkd2
Score10/10-
Detect rhadamanthys stealer shellcode
-
Rhadamanthys
Rhadamanthys is an info stealer written in C++ first seen in August 2022.
-
Rhadamanthys family
-