Analysis
-
max time kernel
144s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
-
submitted
01-05-2023 14:53
General
-
Target
0059bd0b15e1fbbe8461e0e3a60b2874161866448bb05353a6f4662e5d0691f3.exe
-
Size
415KB
-
MD5
7dcf08dfb06e209631870f2ba4a5273c
-
SHA1
9e7aece8b2179a8b0a8971110faf4fd6c3fe8a9a
-
SHA256
0059bd0b15e1fbbe8461e0e3a60b2874161866448bb05353a6f4662e5d0691f3
-
SHA512
45cc76d8e096d8b0fadaa517f414628b1409f188e0ba8881f513e4a9304a6d1d10f201d045ba86ddc5009fe52dd78aff94f32a2aada3a3435854b7333eb19a74
-
SSDEEP
6144:0jBCIL9kOeTdjTkcaXO4xca5gk0ZwOlbilrGAltOfpN7StBEnmYy:0jBHL9teThkTe4S9w7lFlFBEnx
Score
10/10
Malware Config
Extracted
Family
rhadamanthys
C2
http://179.43.142.201/img/favicon.png
Signatures
-
Detect rhadamanthys stealer shellcode 3 IoCs
-
Rhadamanthys
Rhadamanthys is an info stealer written in C++ first seen in August 2022.
Processes
-
C:\Users\Admin\AppData\Local\Temp\0059bd0b15e1fbbe8461e0e3a60b2874161866448bb05353a6f4662e5d0691f3.exe"C:\Users\Admin\AppData\Local\Temp\0059bd0b15e1fbbe8461e0e3a60b2874161866448bb05353a6f4662e5d0691f3.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
184KB
-
Filesize
4.1MB
-
Filesize
112KB
-
Filesize
104KB
-
Filesize
112KB
-
Filesize
4.1MB
-
Filesize
112KB
-
Filesize
104KB