Analysis
-
max time kernel
144s -
max time network
155s -
platform
windows7_x64 -
resource
win7-20230220-en -
resource tags
-
submitted
01-05-2023 15:16
General
-
Target
15d5787220c46042cf6fe90244bc111e96b7a0a82bd0773255926db8575ea9c3.exe
-
Size
398KB
-
MD5
9edbd92ee512582638a90e8d7588ac02
-
SHA1
cd8eb8351c97220d57f42d862add7ece22f98f01
-
SHA256
15d5787220c46042cf6fe90244bc111e96b7a0a82bd0773255926db8575ea9c3
-
SHA512
9b64b7d57e8645b656e2c206d74b1fe8abb332e7fbab64df2b8c9f3578d2ad4ffbbdf85a1bf71866137490c6d744b33227a65477b802060f4fbcc371cc700233
-
SSDEEP
6144:sXs5nmfTPmDDoohc+oFaB95vlnnFE8xvUeJebCXwLFms8snzy:sXsALmvoWc+iavnFE8x814CJnz
Score
10/10
Malware Config
Extracted
Family
rhadamanthys
C2
http://179.43.142.201/img/favicon.png
Signatures
-
Detect rhadamanthys stealer shellcode 4 IoCs
-
Rhadamanthys
Rhadamanthys is an info stealer written in C++ first seen in August 2022.
Processes
-
C:\Users\Admin\AppData\Local\Temp\15d5787220c46042cf6fe90244bc111e96b7a0a82bd0773255926db8575ea9c3.exe"C:\Users\Admin\AppData\Local\Temp\15d5787220c46042cf6fe90244bc111e96b7a0a82bd0773255926db8575ea9c3.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
184KB
-
Filesize
4.0MB
-
Filesize
184KB
-
Filesize
4KB
-
Filesize
112KB
-
Filesize
112KB
-
Filesize
112KB
-
Filesize
4.0MB
-
Filesize
112KB