Analysis
-
max time kernel
148s -
max time network
154s -
platform
windows7_x64 -
resource
win7-20230220-en -
resource tags
-
submitted
01-05-2023 16:40
General
-
Target
5c59a4586e724972a167ac203a28d108f908665a9d80391b5a6ed5272cdc4ff3.exe
-
Size
285KB
-
MD5
874ca4aa9adf9fdbafbb800aad28ae06
-
SHA1
a3df224a5f8bd2b7c3d7283fb5752eb78a2e2fba
-
SHA256
5c59a4586e724972a167ac203a28d108f908665a9d80391b5a6ed5272cdc4ff3
-
SHA512
0cd061d2923822de13ce6f49b1ac17db37d25fcb2dbe9cfdc582a8e038341b5b2e1cbb9843c16940f3a5afc6f759d10c195c56103f3b1b929fcd941ce123178c
-
SSDEEP
6144:jar1AyT+ku6zZaQtix1Bq/IsL1KmndeWYidT:urTTW6zA9x+IsLgs
Score
10/10
Malware Config
Extracted
Family
rhadamanthys
C2
http://179.43.142.201/img/favicon.png
Signatures
-
Detect rhadamanthys stealer shellcode 4 IoCs
-
Rhadamanthys
Rhadamanthys is an info stealer written in C++ first seen in August 2022.
Processes
-
C:\Users\Admin\AppData\Local\Temp\5c59a4586e724972a167ac203a28d108f908665a9d80391b5a6ed5272cdc4ff3.exe"C:\Users\Admin\AppData\Local\Temp\5c59a4586e724972a167ac203a28d108f908665a9d80391b5a6ed5272cdc4ff3.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
184KB
-
Filesize
39.6MB
-
Filesize
112KB
-
Filesize
39.6MB
-
Filesize
4KB
-
Filesize
112KB
-
Filesize
112KB
-
Filesize
112KB