Analysis
-
max time kernel
143s -
max time network
147s -
platform
windows10-2004_x64 -
resource
win10v2004-20230221-en -
resource tags
-
submitted
02-05-2023 21:41
General
-
Target
1a6f247280e4a25fb945082494b419cdaa9ac014da2f7459b02acbff818cf270.exe
-
Size
304KB
-
MD5
6fc6d172080622817570b606a164e01f
-
SHA1
2cef2c2a614d0ad1a87a2618057d38f5562c84fc
-
SHA256
1a6f247280e4a25fb945082494b419cdaa9ac014da2f7459b02acbff818cf270
-
SHA512
393abeea9aa335484e193ce5c08144d3e1e5442e4b9955518c6a86501c1725e89387d8280db6793aa55e7310de9cabf7ed692966851a9df8e2f4d5a08badd54f
-
SSDEEP
6144:QzmSIArh/DD0o9o+mlf9UBFgUcJ8e0IyYea/5AWOWVECRGzjD9:QzmTArh/DDz+LEBFgUcJUqz/5AIEXzP9
Score
10/10
Malware Config
Extracted
Family
rhadamanthys
C2
http://179.43.142.201/img/favicon.png
Signatures
-
Detect rhadamanthys stealer shellcode 4 IoCs
-
Rhadamanthys
Rhadamanthys is an info stealer written in C++ first seen in August 2022.
Processes
-
C:\Users\Admin\AppData\Local\Temp\1a6f247280e4a25fb945082494b419cdaa9ac014da2f7459b02acbff818cf270.exe"C:\Users\Admin\AppData\Local\Temp\1a6f247280e4a25fb945082494b419cdaa9ac014da2f7459b02acbff818cf270.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
184KB
-
Filesize
2.8MB
-
Filesize
112KB
-
Filesize
112KB
-
Filesize
8KB
-
Filesize
112KB
-
Filesize
2.8MB
-
Filesize
112KB