Analysis
-
max time kernel
196s -
max time network
239s -
platform
windows7_x64 -
resource
win7-20230220-en -
resource tags
-
submitted
01-05-2023 17:07
General
-
Target
794498ffa21e3d8cdc90a595ac32bf14b75354f24d4e13454b32915008714d6b.exe
-
Size
416KB
-
MD5
f98f62fdc757bf3638e68378e0b64c79
-
SHA1
cdb7bd57abfe55068279580cad5a69b3aec7f09a
-
SHA256
794498ffa21e3d8cdc90a595ac32bf14b75354f24d4e13454b32915008714d6b
-
SHA512
4d3ded3ab71baede2bbd36175257312e223bc443b06f2e5c5361308854ec82d23b8312040a90c63ebafa7fc7cf45e0c08b7b190a5f076637205bca36db0ba05d
-
SSDEEP
6144:C7brB2Ae02q685UudALgUnXMVy1Q0jr/fqaJ:C7bF2Ae0N6CdWjMVyZ/P
Score
10/10
Malware Config
Extracted
Family
rhadamanthys
C2
http://179.43.142.201/img/favicon.png
Signatures
-
Detect rhadamanthys stealer shellcode 6 IoCs
-
Rhadamanthys
Rhadamanthys is an info stealer written in C++ first seen in August 2022.
Processes
-
C:\Users\Admin\AppData\Local\Temp\794498ffa21e3d8cdc90a595ac32bf14b75354f24d4e13454b32915008714d6b.exe"C:\Users\Admin\AppData\Local\Temp\794498ffa21e3d8cdc90a595ac32bf14b75354f24d4e13454b32915008714d6b.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
184KB
-
Filesize
4.1MB
-
Filesize
184KB
-
Filesize
112KB
-
Filesize
4.1MB
-
Filesize
112KB
-
Filesize
112KB
-
Filesize
112KB
-
Filesize
112KB
-
Filesize
112KB