Analysis
-
max time kernel
148s -
max time network
181s -
platform
windows7_x64 -
resource
win7-20230220-en -
resource tags
-
submitted
01-05-2023 15:15
General
-
Target
141916407ffa95b36278187fbc587868a072c1b65c9e73b29706fdcfa9d86b1f.exe
-
Size
353KB
-
MD5
89cb869f1d15f9ecf5c97b433a078ee3
-
SHA1
fdfed3cebb0af7e21227d64841cea88f4430e16c
-
SHA256
141916407ffa95b36278187fbc587868a072c1b65c9e73b29706fdcfa9d86b1f
-
SHA512
074a658e1c954c1c713d7cd30506a9b45217e1cbd7b8f40ba5c54890bbb6da490713b79fc0f0b7befd2a8ba1c6f6bdb657c0d4eb979ff346edad7cb53db6fe59
-
SSDEEP
6144:rWhJJJG+Wizt/XZcYF7QEynJoxLu3RZdNB71:rWhRG+Wa/XZcw7nyiSDdN
Score
10/10
Malware Config
Extracted
Family
rhadamanthys
C2
http://179.43.142.201/img/favicon.png
Signatures
-
Detect rhadamanthys stealer shellcode 4 IoCs
-
Rhadamanthys
Rhadamanthys is an info stealer written in C++ first seen in August 2022.
Processes
-
C:\Users\Admin\AppData\Local\Temp\141916407ffa95b36278187fbc587868a072c1b65c9e73b29706fdcfa9d86b1f.exe"C:\Users\Admin\AppData\Local\Temp\141916407ffa95b36278187fbc587868a072c1b65c9e73b29706fdcfa9d86b1f.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
184KB
-
Filesize
428KB
-
Filesize
112KB
-
Filesize
4KB
-
Filesize
112KB
-
Filesize
112KB
-
Filesize
428KB
-
Filesize
112KB