Analysis
-
max time kernel
141s -
max time network
144s -
platform
windows7_x64 -
resource
win7-20230220-en -
resource tags
-
submitted
01-05-2023 18:22
General
-
Target
c9c73d8ea45f7698636356bfb561b0e2cbfd00e7d474974743886d93338df86b.exe
-
Size
279KB
-
MD5
747ed29e1fd60c8a8439c28a0871ae5c
-
SHA1
9b2a073267b987623300cc498d016a49a71d70ee
-
SHA256
c9c73d8ea45f7698636356bfb561b0e2cbfd00e7d474974743886d93338df86b
-
SHA512
354160af6880e7f16d7d2bc69cce8e8bc47edbf48bbfa469ad47ea08c64c4dfd3799c04d4244b1b71a717e9e3d770f0ee31d3a1452c3a54610402f58251260e4
-
SSDEEP
3072:uYnMnWdl5bytmMfwBEDM7u5imjza5bKmjHFI1famBn9hvPc7fqBN/nm6C/h1pNn3:jI64AM1DM7u5La1utSiAG8haGo
Score
10/10
Malware Config
Extracted
Family
rhadamanthys
C2
http://179.43.142.201/img/favicon.png
Signatures
-
Detect rhadamanthys stealer shellcode 4 IoCs
-
Rhadamanthys
Rhadamanthys is an info stealer written in C++ first seen in August 2022.
Processes
-
C:\Users\Admin\AppData\Local\Temp\c9c73d8ea45f7698636356bfb561b0e2cbfd00e7d474974743886d93338df86b.exe"C:\Users\Admin\AppData\Local\Temp\c9c73d8ea45f7698636356bfb561b0e2cbfd00e7d474974743886d93338df86b.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
184KB
-
Filesize
360KB
-
Filesize
112KB
-
Filesize
112KB
-
Filesize
4KB
-
Filesize
112KB
-
Filesize
360KB
-
Filesize
112KB