Analysis
-
max time kernel
165s -
max time network
175s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
-
submitted
01-05-2023 18:19
General
-
Target
c5ca92af684259dd0453f2b0ff6794b6.exe
-
Size
290KB
-
MD5
c5ca92af684259dd0453f2b0ff6794b6
-
SHA1
9da7fae5bafc183315a80a876d1be6b6ed2b0781
-
SHA256
c2a74ffd7c6ed65521022f799b4451e512fef20d6ded6a609616b501dd8bd56e
-
SHA512
4348c85b8d0b97e7b8713f97e1535a66bb706e47e11c7e9d409ccaa0cc5fe3082191d3b072348d67e468b6269bc0d469fde40b341b1f293c096bf5b4f9839d39
-
SSDEEP
3072:EYXeLHrLzvjj8eyx8NkiSzrcgBEgfDuvdU9dzOaqhfXDYVhPUeTN9VXrFEBK4V3b:JwjYL8dSzfUaUhbYV1UeTPjgL3oH
Score
10/10
Malware Config
Extracted
Family
rhadamanthys
C2
http://179.43.142.201/img/favicon.png
Signatures
-
Detect rhadamanthys stealer shellcode 4 IoCs
-
Rhadamanthys
Rhadamanthys is an info stealer written in C++ first seen in August 2022.
Processes
-
C:\Users\Admin\AppData\Local\Temp\c5ca92af684259dd0453f2b0ff6794b6.exe"C:\Users\Admin\AppData\Local\Temp\c5ca92af684259dd0453f2b0ff6794b6.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
184KB
-
Filesize
39.6MB
-
Filesize
112KB
-
Filesize
104KB
-
Filesize
39.6MB
-
Filesize
112KB
-
Filesize
112KB
-
Filesize
104KB
-
Filesize
112KB