Analysis
- max time kernel
95s - max time network
150s - platform
windows10-2004_x64 - resource
win10v2004-20230220-en - resource tags
- submitted
13/04/2023, 09:23
General
- Target f61d82e58afeff34e7055ecc5bfead5325646100a6d7d6f4db40cc530c2cf3e9.exe
- Size 305KB
- Sample230413-lctbqaae53
- SHA256 f61d82e58afeff34e7055ecc5bfead5325646100a6d7d6f4db40cc530c2cf3e9
Score
10/10
Malware Config
Signatures
- Detect rhadamanthys stealer shellcode 4 IoCs
- Rhadamanthys
Rhadamanthys is an info stealer written in C++ first seen in August 2022.
- match_everything 8 IoCs
This rule matches all.
Processes
-
C:\Users\Admin\AppData\Local\Temp\f61d82e58afeff34e7055ecc5bfead5325646100a6d7d6f4db40cc530c2cf3e9.exe"C:\Users\Admin\AppData\Local\Temp\f61d82e58afeff34e7055ecc5bfead5325646100a6d7d6f4db40cc530c2cf3e9.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/228-133-0x0000000000400000-0x0000000000432000-memory.dmp
memory/228-134-0x0000000000400000-0x0000000000432000-memory.dmp
memory/228-136-0x00000000028F0000-0x000000000290C000-memory.dmp
memory/228-137-0x00000000028F0000-0x000000000290C000-memory.dmp
memory/228-138-0x0000000002920000-0x000000000293A000-memory.dmp
memory/228-139-0x00000000028F0000-0x000000000290C000-memory.dmp
memory/228-140-0x0000000000400000-0x0000000000432000-memory.dmp
memory/228-141-0x00000000028F0000-0x000000000290C000-memory.dmp