Analysis
-
max time kernel
143s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
-
submitted
01-05-2023 02:20
General
-
Target
6df2f83c2b59ed8ed6d0293e77dba3591b56a236585a9b8323a2e44d487ab129.exe
-
Size
315KB
-
MD5
76c0354990dfb77396b513fabe0939f3
-
SHA1
f9a9bdd0c15afb10808a015695af114deb271bbd
-
SHA256
6df2f83c2b59ed8ed6d0293e77dba3591b56a236585a9b8323a2e44d487ab129
-
SHA512
62a521c90e86c4cedcb3c37091428b09a56708478998e7c5cd441538fa8fe35e2a8b1b87073ddb3b56983126f19e5e6e3d6ca4801a396b81d841239ad9e6c2ef
-
SSDEEP
6144:73k8OSwwo+c9sORhh4kc3PFsILcOOZEMtknqSqO:73k9Sm+YsGb4k2dsILcOqEikqSN
Score
10/10
Malware Config
Extracted
Family
rhadamanthys
C2
http://179.43.142.201/img/favicon.png
Signatures
-
Detect rhadamanthys stealer shellcode 4 IoCs
-
Rhadamanthys
Rhadamanthys is an info stealer written in C++ first seen in August 2022.
Processes
-
C:\Users\Admin\AppData\Local\Temp\6df2f83c2b59ed8ed6d0293e77dba3591b56a236585a9b8323a2e44d487ab129.exe"C:\Users\Admin\AppData\Local\Temp\6df2f83c2b59ed8ed6d0293e77dba3591b56a236585a9b8323a2e44d487ab129.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
184KB
-
Filesize
4.0MB
-
Filesize
112KB
-
Filesize
112KB
-
Filesize
8KB
-
Filesize
112KB
-
Filesize
4.0MB
-
Filesize
112KB