Analysis
-
max time kernel
175s -
max time network
218s -
platform
windows7_x64 -
resource
win7-20230220-en -
resource tags
-
submitted
01-05-2023 16:18
General
-
Target
423d7971ac37b5720526d4abae1defdb70cc327aaa5d4bb4957a359b121727e2.exe
-
Size
269KB
-
MD5
6472f058967f34ae1f0bfc977ff9f140
-
SHA1
f7ffc9739ee2328445d26251d126a185de82c5c1
-
SHA256
423d7971ac37b5720526d4abae1defdb70cc327aaa5d4bb4957a359b121727e2
-
SHA512
c741600ffbd4da8344f81feb2e84ad6773f323d357bf1e29f1b7b52d5557f67d61249bef4a5669222cabbddb460fd1bce04e0223166a10ac00819756e86735fd
-
SSDEEP
6144:gsV82boXwDyzdMF3hW4jNDRNs4sYVfTZ:gkLDDyzdohWQxRHLZ
Score
10/10
Malware Config
Extracted
Family
rhadamanthys
C2
http://179.43.142.201/img/favicon.png
Signatures
-
Detect rhadamanthys stealer shellcode 4 IoCs
-
Rhadamanthys
Rhadamanthys is an info stealer written in C++ first seen in August 2022.
Processes
-
C:\Users\Admin\AppData\Local\Temp\423d7971ac37b5720526d4abae1defdb70cc327aaa5d4bb4957a359b121727e2.exe"C:\Users\Admin\AppData\Local\Temp\423d7971ac37b5720526d4abae1defdb70cc327aaa5d4bb4957a359b121727e2.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
184KB
-
Filesize
39.6MB
-
Filesize
112KB
-
Filesize
112KB
-
Filesize
112KB
-
Filesize
39.6MB
-
Filesize
112KB