Analysis
-
max time kernel
153s -
max time network
157s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
-
submitted
01-05-2023 18:38
General
-
Target
d57d02dddb873248d11e2b3c2ee332df8bdbca1344e202df72cced950e0f65f6.exe
-
Size
279KB
-
MD5
b7b14e398f9b2d57d1f47ebc7acebbf3
-
SHA1
5fabc0646c70bb15967669b70b11b4bf1cca4aec
-
SHA256
d57d02dddb873248d11e2b3c2ee332df8bdbca1344e202df72cced950e0f65f6
-
SHA512
edfe12c3cd44623421ca5422a1f0d7540ab8dfba18b9bb83bba488d9a021325098866c365fd28dd478fd4c86c358ddbfcb9e8b21b5c59bcff86c533a4e284782
-
SSDEEP
6144:v+EoccRgTCX9Sx3ZSE6PY2DgxW9VdUuD1Nv:v+ZcceTCX4ZVx2EU9sW1N
Score
10/10
Malware Config
Extracted
Family
rhadamanthys
C2
http://179.43.142.201/img/favicon.png
Signatures
-
Detect rhadamanthys stealer shellcode 4 IoCs
-
Rhadamanthys
Rhadamanthys is an info stealer written in C++ first seen in August 2022.
Processes
-
C:\Users\Admin\AppData\Local\Temp\d57d02dddb873248d11e2b3c2ee332df8bdbca1344e202df72cced950e0f65f6.exe"C:\Users\Admin\AppData\Local\Temp\d57d02dddb873248d11e2b3c2ee332df8bdbca1344e202df72cced950e0f65f6.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
184KB
-
Filesize
360KB
-
Filesize
112KB
-
Filesize
112KB
-
Filesize
8KB
-
Filesize
112KB
-
Filesize
360KB
-
Filesize
112KB