Resubmissions
23-01-2023 13:41
230123-qzjg9add79 1027-12-2022 17:22
221227-vxl8ksfd97 1027-12-2022 17:10
221227-vprhbsae8t 10Analysis
-
max time kernel
149s -
max time network
175s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
23-01-2023 13:41
General
-
Target
VirtualBox 7.0-Download_Old_Builds - About - Documentation.exe
-
Size
727.0MB
-
MD5
8d10972d8f4c00b6811783823e2e3ec6
-
SHA1
f6c86e26b6e55c71a02ee932bb0bae7200feaae1
-
SHA256
ab378c4f2a52e1c4a5e199917e37a4d58a4f2c0d7585bb6f68f353d4018aba8c
-
SHA512
27636191bd6c1da31cf0fee717c6fd612b2b5aa8b65e9ffa85566852abc6e12860b89baf3e50aeb6b2138a220d3bc737e6fa53b16983de3d04df5a9c239bfb97
-
SSDEEP
12288:JgWkSNSTtX+5kOzIGgn/5HY5o8e3Fu3R+ZysWra9PtdBtSt6x4fOddti1ySgJly8:fkSy+510TnDPPvit6x4wi1ySgJlWVO
Score
10/10
Malware Config
Signatures
-
Detect rhadamanthys stealer shellcode 2 IoCs
-
Rhadamanthys
Rhadamanthys is an info stealer written in C++ first seen in August 2022.
Processes
-
C:\Users\Admin\AppData\Local\Temp\VirtualBox 7.0-Download_Old_Builds - About - Documentation.exe"C:\Users\Admin\AppData\Local\Temp\VirtualBox 7.0-Download_Old_Builds - About - Documentation.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/4220-132-0x0000000000B70000-0x0000000000BA3000-memory.dmpFilesize
204KB
-
memory/4220-136-0x0000000000E87000-0x0000000000E8A000-memory.dmpFilesize
12KB
-
memory/4220-137-0x0000000000BB0000-0x0000000000BCD000-memory.dmpFilesize
116KB
-
memory/4220-138-0x0000000000BB0000-0x0000000000BCD000-memory.dmpFilesize
116KB