Analysis
-
max time kernel
152s -
max time network
183s -
platform
windows7_x64 -
resource
win7-20230220-en -
resource tags
-
submitted
01-05-2023 16:50
General
-
Target
6751e2d1c8d45dd2367b808fa8735262.exe
-
Size
398KB
-
MD5
6751e2d1c8d45dd2367b808fa8735262
-
SHA1
ec27978be7338ca691686c5fadd6dc2a168b55df
-
SHA256
9d137028d8a2aceaa94662fb71620762bdc9780ceebf7122c307644db186e9fe
-
SHA512
8fc6a385259a5e621235eab63f8098b2832b2402a72bc1336ec66f3cba80bb31123f06202647a8fbe133d09e8b7500723bee8d3ee9e1bdcc08bf2cd8879b25be
-
SSDEEP
6144:s42E+hZqmFutSgeldahSiuy0gnmgxJeOkHx4dlzuSQIhDRX:B2ZzqmFuUPfaI1AmgxJe56dlzf1DRX
Score
10/10
Malware Config
Extracted
Family
rhadamanthys
C2
http://179.43.142.201/img/favicon.png
Signatures
-
Detect rhadamanthys stealer shellcode 4 IoCs
-
Rhadamanthys
Rhadamanthys is an info stealer written in C++ first seen in August 2022.
Processes
-
C:\Users\Admin\AppData\Local\Temp\6751e2d1c8d45dd2367b808fa8735262.exe"C:\Users\Admin\AppData\Local\Temp\6751e2d1c8d45dd2367b808fa8735262.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
184KB
-
Filesize
4.0MB
-
Filesize
4.0MB
-
Filesize
112KB
-
Filesize
4KB
-
Filesize
112KB
-
Filesize
112KB
-
Filesize
112KB