Analysis
-
max time kernel
154s -
max time network
163s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
-
submitted
01-05-2023 16:20
General
-
Target
450825567fbd82df980d6eb7b28922655e4b5a17505219ac860eb74f6e6fbe17.exe
-
Size
279KB
-
MD5
01a447f429e819777e6c0984ad5147c8
-
SHA1
383822de16a3f52a3728d73c5bac758b4b062294
-
SHA256
450825567fbd82df980d6eb7b28922655e4b5a17505219ac860eb74f6e6fbe17
-
SHA512
3a2ed4a091c36a8115b57834dffbab394a7dea09522ec03f2c4f3f1664705c78f556de3d9a2b0a93d38cc589dddb1b05533cf697f5a740b16d4ba506af07f173
-
SSDEEP
3072:YfS0OBN1Gbl7+Jn2VdWhmpEpoKroZVBWm4WJYQybv26l/cbV5Y5qj9Hlk0o:28QbQn2CUnKr0VB3LYT26dcbVlj9HlM
Score
10/10
Malware Config
Extracted
Family
rhadamanthys
C2
http://179.43.142.201/img/favicon.png
Signatures
-
Detect rhadamanthys stealer shellcode 4 IoCs
-
Rhadamanthys
Rhadamanthys is an info stealer written in C++ first seen in August 2022.
Processes
-
C:\Users\Admin\AppData\Local\Temp\450825567fbd82df980d6eb7b28922655e4b5a17505219ac860eb74f6e6fbe17.exe"C:\Users\Admin\AppData\Local\Temp\450825567fbd82df980d6eb7b28922655e4b5a17505219ac860eb74f6e6fbe17.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
184KB
-
Filesize
360KB
-
Filesize
112KB
-
Filesize
112KB
-
Filesize
8KB
-
Filesize
112KB
-
Filesize
360KB
-
Filesize
112KB