General

  • Target

    Armageddon.zip

  • Size

    4.6MB

  • MD5

    aa89bb03033d07376bf1a7c410c8a05b

  • SHA1

    2f4998479b726c6a4b39b0b36512e94b2874d7d7

  • SHA256

    615dd41707af9736ba4eeb08a0797395a0edc6fd605718a965c5029cbafe5818

  • SHA512

    704b64c425437cd23623ba0aaec83846aa6f2514ed86f9c51681e62fc698bb745a0f3d8b6094863dd0b8584274e0ba3189297170c3954ce2fc86e6c1a988c9b0

  • SSDEEP

    98304:pdUCcMsZBqg2eu7CrbAG5kV5ehNbG+DgHyaJ/iAsw:HUCu7qqrb3c5ehxZLM

Score
10/10

Malware Config

Signatures

  • Detects Rhadamanthys payload 1 IoCs
  • Rhadamanthys family
  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • Armageddon.zip
    .zip

    Password: 1234

  • Setup.exe
    .exe windows:6 windows x64 arch:x64

    Password: 1234

    d743740f06aa0a325bb5c948f63319ce


    Headers

    Imports

    Sections

  • license.txt
  • msvcp290.dll
    .dll windows:6 windows x64 arch:x64

    Password: 1234

    221424c63ccf4fcca55a16bc0ecaa4f1


    Headers

    Imports

    Exports

    Sections

  • nasrallah_x86.dll
  • tier0_s64.dll
    .dll windows:6 windows x64 arch:x64

    Password: 1234

    0cb93c77c0be071ba89ceffc11936dea


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • vcruntime210.dll
  • vstdlib_s64.dll
    .dll windows:6 windows x64 arch:x64

    Password: 1234

    90ea9a0cd2f70f29478e1f4c341a9444


    Headers

    Imports

    Exports

    Sections