Analysis
-
max time kernel
150s -
max time network
152s -
platform
windows7_x64 -
resource
win7-20230220-en -
resource tags
-
submitted
30-04-2023 23:37
General
-
Target
39aeb74d2b87aa99bfd4e7edd09b5184b88fcbb7db54a15fc655f2b12aab69e3.exe
-
Size
410KB
-
MD5
3a5846349c57f19ee18096b0cf135c6e
-
SHA1
616c65135130880c9d38ac0d2d7b40eb0fe8272c
-
SHA256
39aeb74d2b87aa99bfd4e7edd09b5184b88fcbb7db54a15fc655f2b12aab69e3
-
SHA512
df9036fb293833e485253100d3177f75ae87b5c0d4c3c0e2f63a90dc1f2dd50fcfcb4d5af86dd995381c39520d5928e7c018305b124cdf63cf1df73a8c0b7a2e
-
SSDEEP
12288:l57N4oCBxA7lyP4J+zzZl+5t9utF8EkWihrnj7:lxaoCBhP4czZl+MtFNsj7
Score
10/10
Malware Config
Extracted
Family
rhadamanthys
C2
http://179.43.142.201/img/favicon.png
Signatures
-
Detect rhadamanthys stealer shellcode 4 IoCs
-
Rhadamanthys
Rhadamanthys is an info stealer written in C++ first seen in August 2022.
Processes
-
C:\Users\Admin\AppData\Local\Temp\39aeb74d2b87aa99bfd4e7edd09b5184b88fcbb7db54a15fc655f2b12aab69e3.exe"C:\Users\Admin\AppData\Local\Temp\39aeb74d2b87aa99bfd4e7edd09b5184b88fcbb7db54a15fc655f2b12aab69e3.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
184KB
-
Filesize
4.0MB
-
Filesize
112KB
-
Filesize
4KB
-
Filesize
112KB
-
Filesize
112KB
-
Filesize
4.0MB
-
Filesize
112KB