Analysis
-
max time kernel
143s -
max time network
147s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
-
submitted
01-05-2023 07:24
General
-
Target
ae72992efbf152add2c9872ec7b87a63d8f4b8a94c1dc27ad9dcd7855822abba.exe
-
Size
369KB
-
MD5
96779c87cfefb33819eb441b25f913d8
-
SHA1
7d8b62d1baa02a81db6735962cfe710570935117
-
SHA256
ae72992efbf152add2c9872ec7b87a63d8f4b8a94c1dc27ad9dcd7855822abba
-
SHA512
00f831df7d2026a732b4f0ca4f9f44d8fc31984314aa8839f06fc5d88517de0ea33755f475a94f6fa996dbfac30df8d893212ee32e76d6102939984b7a92f00a
-
SSDEEP
6144:/2BdStFCw+UeQcn64qzim6mOB5HcaqVFaWt+:OBdStFD10JXmyqVjk
Score
10/10
Malware Config
Extracted
Family
rhadamanthys
C2
http://179.43.142.201/img/favicon.png
Signatures
-
Detect rhadamanthys stealer shellcode 4 IoCs
-
Rhadamanthys
Rhadamanthys is an info stealer written in C++ first seen in August 2022.
Processes
-
C:\Users\Admin\AppData\Local\Temp\ae72992efbf152add2c9872ec7b87a63d8f4b8a94c1dc27ad9dcd7855822abba.exe"C:\Users\Admin\AppData\Local\Temp\ae72992efbf152add2c9872ec7b87a63d8f4b8a94c1dc27ad9dcd7855822abba.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
184KB
-
Filesize
444KB
-
Filesize
112KB
-
Filesize
112KB
-
Filesize
8KB
-
Filesize
112KB
-
Filesize
444KB
-
Filesize
112KB