Rhadamanthys C2 Panel 26461dbb

Detects the Rhadamanthys stealer C2 panel page.

For some reason this stealer decides to explicitly state that the page is for the Rhadamanthys stealer panel

References

IOK Rule (edit) 

title: Rhadamanthys C2 Panel 26461dbb
description: | 
  Detects the `Rhadamanthys` stealer C2 panel page. 

  For some reason this stealer decides to explicitly
  state that the page is for the Rhadamanthys stealer panel

references: 
  - https://tracker.viriback.com
  - https://blog.cyble.com/2023/01/12/rhadamanthys-new-stealer-spreading-through-google-ads
  - https://urlscan.io/result/26461dbb-9ea7-4a18-9f50-2c9d6503947e

detection: 
    
  pageTitle:
    dom|contains: 'Dashboard - Rhadamanthys'
    
  logo:
    dom|contains: 'data-v-9beba3d6="" src="assets/logo.faa4fd30.svg"'
    
  copyrightFooter:
    dom|contains: 'Copyright © 2022 rhadamanthys'
   
  condition: logo and pageTitle


tags: 
  - malware.rhadamanthys
  - malware