Analysis
-
max time kernel
150s -
max time network
154s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
-
submitted
03-05-2023 00:29
General
-
Target
setup.exe
-
Size
305KB
-
MD5
4671e3c9c691fdd8fbae90d1db23729a
-
SHA1
e7bb4967178fdfb723b4034587b748d94cbc697f
-
SHA256
c99a1c764d580a930af69a77b18e395223d7c37cddd8524151f5c457add290c1
-
SHA512
0cb9cd57025543e27e5beda3f82074d608bc4ff49ab901269b1b450cb24f6e1ae9689f375a697e0ffac32de8f7706ee618f46cc3aef93aaf367cb07b92406b9d
-
SSDEEP
6144:013HI2Q6/Xk2VTuGS8G+B5hbGCWhaeyoo6VM8/AG:013od6/Xk8SaVXWMIA
Score
10/10
Malware Config
Extracted
Family
rhadamanthys
C2
http://179.43.142.201/img/favicon.png
Signatures
-
Detect rhadamanthys stealer shellcode 4 IoCs
-
Rhadamanthys
Rhadamanthys is an info stealer written in C++ first seen in August 2022.
Processes
-
C:\Users\Admin\AppData\Local\Temp\setup.exe"C:\Users\Admin\AppData\Local\Temp\setup.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
184KB
-
Filesize
2.8MB
-
Filesize
112KB
-
Filesize
112KB
-
Filesize
8KB
-
Filesize
112KB
-
Filesize
2.8MB
-
Filesize
112KB