Analysis
-
max time kernel
148s -
max time network
160s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
-
submitted
01-05-2023 00:08
General
-
Target
5e581668188ce49f404eb986988a44785e0811689476f76ee6bfe2fb6278b983.exe
-
Size
285KB
-
MD5
13d26d684ee31aac86fa01e9b1b43d86
-
SHA1
cd2107ae7f51de8ecf75918446c0d4d706826520
-
SHA256
5e581668188ce49f404eb986988a44785e0811689476f76ee6bfe2fb6278b983
-
SHA512
f044230a1bb8f698706f4b64ef25dedfe21af7c4c6fb3e49f7012e34e81cf5a51a73a718b8e38a5ba852951939eaaf81bb6a05e40b546470cd9cd0b677f51881
-
SSDEEP
6144:WCOT61OBLyqzB8d06LFrUSmgHzUO5wmSpYST:D8E+1BW06LFrRmUf5+yi
Score
10/10
Malware Config
Extracted
Family
rhadamanthys
C2
http://179.43.142.201/img/favicon.png
Signatures
-
Detect rhadamanthys stealer shellcode 4 IoCs
-
Rhadamanthys
Rhadamanthys is an info stealer written in C++ first seen in August 2022.
Processes
-
C:\Users\Admin\AppData\Local\Temp\5e581668188ce49f404eb986988a44785e0811689476f76ee6bfe2fb6278b983.exe"C:\Users\Admin\AppData\Local\Temp\5e581668188ce49f404eb986988a44785e0811689476f76ee6bfe2fb6278b983.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
184KB
-
Filesize
39.6MB
-
Filesize
112KB
-
Filesize
104KB
-
Filesize
112KB
-
Filesize
112KB
-
Filesize
39.6MB
-
Filesize
112KB
-
Filesize
104KB