Analysis
-
max time kernel
142s -
max time network
149s -
platform
windows7_x64 -
resource
win7-20230220-en -
resource tags
-
submitted
01-05-2023 15:39
General
-
Target
224a575de77c4d9f340848239adb20ec.exe
-
Size
353KB
-
MD5
224a575de77c4d9f340848239adb20ec
-
SHA1
db737d7f9dc6a6e8b3ed78ce1d7cfe1c3fe752ea
-
SHA256
e40c3dd832634b0847f84a4499047d9552a77a62245a99ccec4b084c948188c6
-
SHA512
0dfa38c02c87a0f97caa65a09ba6060797b5163b441367380fe736f5e452c7abb33fe665ba7e1cbaafca420b34a60744ed2342ed5cbed015e7e1dfc99b3daf1c
-
SSDEEP
3072:PuO0WqSzhFbMRMB8XnXQ7MfUXS80Xs5a/Ais391B0v2agQnoY9PYm85xZBdNzWTh:lYSFFwRNw7Cl85a4iUJJ+PVQZBdNi1
Score
10/10
Malware Config
Extracted
Family
rhadamanthys
C2
http://179.43.142.201/img/favicon.png
Signatures
-
Detect rhadamanthys stealer shellcode 6 IoCs
-
Rhadamanthys
Rhadamanthys is an info stealer written in C++ first seen in August 2022.
Processes
-
C:\Users\Admin\AppData\Local\Temp\224a575de77c4d9f340848239adb20ec.exe"C:\Users\Admin\AppData\Local\Temp\224a575de77c4d9f340848239adb20ec.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
184KB
-
Filesize
428KB
-
Filesize
112KB
-
Filesize
428KB
-
Filesize
112KB
-
Filesize
112KB
-
Filesize
112KB
-
Filesize
112KB
-
Filesize
112KB