Analysis
-
max time kernel
151s -
max time network
146s -
platform
windows7_x64 -
resource
win7-20230220-en -
resource tags
-
submitted
01-05-2023 15:47
General
-
Target
2b535c2d6700f17b16df4b917755f339277f007bcac1b78ee3b93d4ed6005c68.exe
-
Size
278KB
-
MD5
6a933a4a98e92fb8498243936f9cf0cf
-
SHA1
dcf6034abd763d9207c313c516e56ddc6f6468bd
-
SHA256
2b535c2d6700f17b16df4b917755f339277f007bcac1b78ee3b93d4ed6005c68
-
SHA512
67c8f2ebf66404745b53ef18c0383c4e103ae83984d6f1f2b762be624f796a27dfe1bbf3230adaaaf11e9026595b30863eef423a4fcf410ed52086ce711ae9b2
-
SSDEEP
3072:OWs3VdLYkqSf1UKKKbzU6acMNWeDqXBUYydGTTupSXJPvsNb6Ux45KXaj:u3jqS7bOdWe+XBHy4apkJPvsNB3Xa
Score
10/10
Malware Config
Extracted
Family
rhadamanthys
C2
http://179.43.142.201/img/favicon.png
Signatures
-
Detect rhadamanthys stealer shellcode 4 IoCs
-
Rhadamanthys
Rhadamanthys is an info stealer written in C++ first seen in August 2022.
Processes
-
C:\Users\Admin\AppData\Local\Temp\2b535c2d6700f17b16df4b917755f339277f007bcac1b78ee3b93d4ed6005c68.exe"C:\Users\Admin\AppData\Local\Temp\2b535c2d6700f17b16df4b917755f339277f007bcac1b78ee3b93d4ed6005c68.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
184KB
-
Filesize
360KB
-
Filesize
112KB
-
Filesize
112KB
-
Filesize
4KB
-
Filesize
112KB
-
Filesize
360KB
-
Filesize
112KB