Analysis
-
max time kernel
175s -
max time network
182s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
-
submitted
01-05-2023 16:58
General
-
Target
704995a86a6007f25293475b108070c5c68830dc0efab4ad50308df8e4146e28.exe
-
Size
417KB
-
MD5
daba0cbca95a55d5b43c0571417f3ae6
-
SHA1
a5f0f9ab292277ddae1d130e95bfc3ff5057945e
-
SHA256
704995a86a6007f25293475b108070c5c68830dc0efab4ad50308df8e4146e28
-
SHA512
ed3482067ea1d2809c4c19d90007e7ada1e97bd552b0d228fdc3c7df25e05753f70d2d3cb0fbeb8348dca6bd5b36a44f67cc335a46d8aad43800d32e694b61ff
-
SSDEEP
6144:9ibaGFXq5VqzppsRiBiiGptkzia0O6M/HqMkX2IZfq:9ibLFXq3GpsRXTgi5OVKM0nZ
Score
10/10
Malware Config
Extracted
Family
rhadamanthys
C2
http://179.43.142.201/img/favicon.png
Signatures
-
Detect rhadamanthys stealer shellcode 6 IoCs
-
Rhadamanthys
Rhadamanthys is an info stealer written in C++ first seen in August 2022.
Processes
-
C:\Users\Admin\AppData\Local\Temp\704995a86a6007f25293475b108070c5c68830dc0efab4ad50308df8e4146e28.exe"C:\Users\Admin\AppData\Local\Temp\704995a86a6007f25293475b108070c5c68830dc0efab4ad50308df8e4146e28.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
184KB
-
Filesize
4.1MB
-
Filesize
4.1MB
-
Filesize
4.1MB
-
Filesize
112KB
-
Filesize
112KB
-
Filesize
112KB
-
Filesize
112KB
-
Filesize
112KB
-
Filesize
112KB