Analysis
-
max time kernel
149s -
max time network
160s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
-
submitted
01-05-2023 16:36
General
-
Target
5704a0153196947f456807e33ded41f5d49eed5e8c7ac26871995f7db055d36f.exe
-
Size
398KB
-
MD5
d050a7a6da957c3b3c5e723fecb95029
-
SHA1
4d4a92a5b606d2a3805ff39a729cfa224e4028a3
-
SHA256
5704a0153196947f456807e33ded41f5d49eed5e8c7ac26871995f7db055d36f
-
SHA512
2dae1174c9bce27d5b5e487ed0982ddd52fe2dd71bb2defb270b50aecc202ee0101352742d76859d3361c1ed2cce8da5f48b1fc811393b76ff61857e2e5ac59b
-
SSDEEP
6144:nZw1eZILFwdHn3xKBlMOXT1JzpYxe0Vp4j+wjw3GTm:nZ6eZILFwdH3QzpKe0Vp4jtjhm
Score
10/10
Malware Config
Extracted
Family
rhadamanthys
C2
http://179.43.142.201/img/favicon.png
Signatures
-
Detect rhadamanthys stealer shellcode 4 IoCs
-
Rhadamanthys
Rhadamanthys is an info stealer written in C++ first seen in August 2022.
Processes
-
C:\Users\Admin\AppData\Local\Temp\5704a0153196947f456807e33ded41f5d49eed5e8c7ac26871995f7db055d36f.exe"C:\Users\Admin\AppData\Local\Temp\5704a0153196947f456807e33ded41f5d49eed5e8c7ac26871995f7db055d36f.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
184KB
-
Filesize
4.0MB
-
Filesize
112KB
-
Filesize
104KB
-
Filesize
112KB
-
Filesize
4.0MB
-
Filesize
112KB
-
Filesize
112KB
-
Filesize
104KB