Analysis
-
max time kernel
41s -
max time network
62s -
platform
windows10-1703_x64 -
resource
win10-20220812-en -
resource tags
-
submitted
19-12-2022 01:30
General
-
Target
77184e90d4f8ad7ffb39086dc95d3aba0f80c6fdc07dacadee0f772d5816462e.exe
-
Size
287KB
-
MD5
31a87d2d370c08d8dee00cedc64519e7
-
SHA1
7128b4bd573df2e6b29eaece7d208e5937b26fe3
-
SHA256
77184e90d4f8ad7ffb39086dc95d3aba0f80c6fdc07dacadee0f772d5816462e
-
SHA512
1b72e4d002bef028b2b67f4a472b50b38a7f5b0a91ca6283dfe3103c5698fa032da814f53ac303da78c5f552356c57a38202e1adcdd21d5cd90349eda56bbb54
-
SSDEEP
6144:GnfL6RcFsSp5e4mHfor4w1SBjp70ZG0CLjcbXF:GnfOuF5rmHgr4pjp70I0GYbXF
Malware Config
Signatures
-
Detect rhadamanthys stealer shellcode 1 IoCs
-
Rhadamanthys
Rhadamanthys is an info stealer written in C++ first seen in August 2022.
-
Suspicious use of NtSetInformationThreadHideFromDebugger 3 IoCs
-
Program crash 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\77184e90d4f8ad7ffb39086dc95d3aba0f80c6fdc07dacadee0f772d5816462e.exe"C:\Users\Admin\AppData\Local\Temp\77184e90d4f8ad7ffb39086dc95d3aba0f80c6fdc07dacadee0f772d5816462e.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2972 -s 6642⤵
- Program crash
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
140KB
-
Filesize
1.6MB
-
Filesize
1.3MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
444KB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
8KB
-
Filesize
140KB
-
Filesize
140KB
-
Filesize
444KB