General
-
Target
LockBitRW.rar
-
Size
2.6MB
-
Sample
241205-r1m3haynct
-
MD5
cff570c34e99218bd2ae7454234082e3
-
SHA1
7037992c0d898866ee344eb0a8f36b99d3603ea2
-
SHA256
9ad0324340223dbe0dd10e61f2b497be6013b8840b5fda015e4c7296270d2122
-
SHA512
22d6ea113e56707450995c5025467def6a91e4efae5f9d1b719cbe5eb9c6d499d693a40e14f4f65a685c98edff45a50fb9b5f4e80c2238bf7fa53308e2226613
-
SSDEEP
49152:REmempzmEmeJS6+KWxxeEiqTwoGbC8aASHi8nNzFjVUWkEm3Q7iC3uEsTEmu:/eUUeINGokC8FH8NZjveg753Rslu
Behavioral task
behavioral1
Sample
LockBitRW.rar
Resource
win11-20241007-en
Behavioral task
behavioral2
Sample
Debug/decryptor.exe
Resource
win11-20241007-en
Behavioral task
behavioral3
Sample
Release/decryptor.exe
Resource
win11-20241007-en
Behavioral task
behavioral4
Sample
builder.exe
Resource
win11-20241007-en
Behavioral task
behavioral5
Sample
decryptor/decryptor.exe
Resource
win11-20241023-en
Malware Config
Extracted
rhadamanthys
https://195.3.223.126:4287/9d0dc091285eb9fbf2e/o8f3c8oj.8rdif
Targets
-
-
Target
LockBitRW.rar
-
Size
2.6MB
-
MD5
cff570c34e99218bd2ae7454234082e3
-
SHA1
7037992c0d898866ee344eb0a8f36b99d3603ea2
-
SHA256
9ad0324340223dbe0dd10e61f2b497be6013b8840b5fda015e4c7296270d2122
-
SHA512
22d6ea113e56707450995c5025467def6a91e4efae5f9d1b719cbe5eb9c6d499d693a40e14f4f65a685c98edff45a50fb9b5f4e80c2238bf7fa53308e2226613
-
SSDEEP
49152:REmempzmEmeJS6+KWxxeEiqTwoGbC8aASHi8nNzFjVUWkEm3Q7iC3uEsTEmu:/eUUeINGokC8FH8NZjveg753Rslu
Score10/10-
Detect rhadamanthys stealer shellcode
-
Rhadamanthys
Rhadamanthys is an info stealer written in C++ first seen in August 2022.
-
Rhadamanthys family
-
Executes dropped EXE
-
-
-
Target
Debug/decryptor.exe
-
Size
456KB
-
MD5
515a0c8be21a5ba836e5687fc2d73333
-
SHA1
c52be9d0d37ac1b8d6bc09860e68e9e0615255ab
-
SHA256
9950788284df125c7359aeb91435ed24d59359fac6a74ed73774ca31561cc7ae
-
SHA512
4e2bd7ce844bba25aff12e2607c4281b59f7579b9407139ef6136ef09282c7afac1c702adebc42f8bd7703fac047fd8b5add34df334bfc04d3518ea483225522
-
SSDEEP
6144:2uWP/BtSnurUylcrGYlnIttxv8HbcLgsd1Gus5psdrvV44dixP+MHDkBYdxtG9+V:2uWP/BZUyoLu8Agsmxwrvejkd2
Score10/10-
Detect rhadamanthys stealer shellcode
-
Rhadamanthys
Rhadamanthys is an info stealer written in C++ first seen in August 2022.
-
Rhadamanthys family
-
-
-
Target
Release/decryptor.exe
-
Size
456KB
-
MD5
515a0c8be21a5ba836e5687fc2d73333
-
SHA1
c52be9d0d37ac1b8d6bc09860e68e9e0615255ab
-
SHA256
9950788284df125c7359aeb91435ed24d59359fac6a74ed73774ca31561cc7ae
-
SHA512
4e2bd7ce844bba25aff12e2607c4281b59f7579b9407139ef6136ef09282c7afac1c702adebc42f8bd7703fac047fd8b5add34df334bfc04d3518ea483225522
-
SSDEEP
6144:2uWP/BtSnurUylcrGYlnIttxv8HbcLgsd1Gus5psdrvV44dixP+MHDkBYdxtG9+V:2uWP/BZUyoLu8Agsmxwrvejkd2
Score10/10-
Detect rhadamanthys stealer shellcode
-
Rhadamanthys
Rhadamanthys is an info stealer written in C++ first seen in August 2022.
-
Rhadamanthys family
-
-
-
Target
builder.exe
-
Size
456KB
-
MD5
515a0c8be21a5ba836e5687fc2d73333
-
SHA1
c52be9d0d37ac1b8d6bc09860e68e9e0615255ab
-
SHA256
9950788284df125c7359aeb91435ed24d59359fac6a74ed73774ca31561cc7ae
-
SHA512
4e2bd7ce844bba25aff12e2607c4281b59f7579b9407139ef6136ef09282c7afac1c702adebc42f8bd7703fac047fd8b5add34df334bfc04d3518ea483225522
-
SSDEEP
6144:2uWP/BtSnurUylcrGYlnIttxv8HbcLgsd1Gus5psdrvV44dixP+MHDkBYdxtG9+V:2uWP/BZUyoLu8Agsmxwrvejkd2
Score10/10-
Detect rhadamanthys stealer shellcode
-
Rhadamanthys
Rhadamanthys is an info stealer written in C++ first seen in August 2022.
-
Rhadamanthys family
-
-
-
Target
decryptor/decryptor.exe
-
Size
456KB
-
MD5
515a0c8be21a5ba836e5687fc2d73333
-
SHA1
c52be9d0d37ac1b8d6bc09860e68e9e0615255ab
-
SHA256
9950788284df125c7359aeb91435ed24d59359fac6a74ed73774ca31561cc7ae
-
SHA512
4e2bd7ce844bba25aff12e2607c4281b59f7579b9407139ef6136ef09282c7afac1c702adebc42f8bd7703fac047fd8b5add34df334bfc04d3518ea483225522
-
SSDEEP
6144:2uWP/BtSnurUylcrGYlnIttxv8HbcLgsd1Gus5psdrvV44dixP+MHDkBYdxtG9+V:2uWP/BZUyoLu8Agsmxwrvejkd2
Score10/10-
Detect rhadamanthys stealer shellcode
-
Rhadamanthys
Rhadamanthys is an info stealer written in C++ first seen in August 2022.
-
Rhadamanthys family
-