Analysis
-
max time kernel
204s -
max time network
261s -
platform
windows7_x64 -
resource
win7-20230220-en -
resource tags
-
submitted
01-05-2023 18:22
General
-
Target
c960b48ec683adf04827b29b6dff2cd84bf2e84b89e482edc2458c164e1f3652.exe
-
Size
397KB
-
MD5
dea37e055803e471eb68fe1e5253ac7b
-
SHA1
a5b98c85fc3f49e2453c311ab0b488670b006526
-
SHA256
c960b48ec683adf04827b29b6dff2cd84bf2e84b89e482edc2458c164e1f3652
-
SHA512
a3704e83c89258b5c5e19d5518ddfd786a17d0999186fdabfc5ba13b5521224451dae39e16822d78c4557a1f9297cb998ef9e74c5b263c69aac0d0e1be549123
-
SSDEEP
6144:xg6HNucTlDVuOSvFQ51Fd5kWxRvn1mJI3yPq7rpxrzgxz5z+zAtPEw6:xg6t3lDVL++5F5kWx4ICPYpNzU5S/b
Score
10/10
Malware Config
Extracted
Family
rhadamanthys
C2
http://179.43.142.201/img/favicon.png
Signatures
-
Detect rhadamanthys stealer shellcode 4 IoCs
-
Rhadamanthys
Rhadamanthys is an info stealer written in C++ first seen in August 2022.
Processes
-
C:\Users\Admin\AppData\Local\Temp\c960b48ec683adf04827b29b6dff2cd84bf2e84b89e482edc2458c164e1f3652.exe"C:\Users\Admin\AppData\Local\Temp\c960b48ec683adf04827b29b6dff2cd84bf2e84b89e482edc2458c164e1f3652.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
184KB
-
Filesize
4.0MB
-
Filesize
112KB
-
Filesize
4KB
-
Filesize
112KB
-
Filesize
112KB
-
Filesize
4.0MB
-
Filesize
112KB