Analysis
-
max time kernel
144s -
max time network
147s -
platform
windows10-1703_x64 -
resource
win10-20230220-en -
resource tags
-
submitted
03-05-2023 19:42
General
-
Target
7730ddf737f8a86606af30c6f23c6745299a34ca469bf4e2fec44c77f0831178.exe
-
Size
312KB
-
MD5
2855594ad7b56c2034ca8fa9cc4f91ee
-
SHA1
67bd3fcc993b7b49da2e4031bc49101f3537426b
-
SHA256
7730ddf737f8a86606af30c6f23c6745299a34ca469bf4e2fec44c77f0831178
-
SHA512
3b12057b71ef95fdb38daec26d510cc6ea3da7d478f9a6133a7ba55e7ac7f6c14534d92002ac05317fbef4e1575934953f33adefe7b31ca5827b3ee2e3c335ff
-
SSDEEP
6144:Wc3yUD4168ptBXFDZK0cTrFy71+TsO4AsNvJmJ:Wc3yUW6ItBLK0cFyYgblNvYJ
Score
10/10
Malware Config
Extracted
Family
rhadamanthys
C2
http://179.43.142.201/img/favicon.png
Signatures
-
Detect rhadamanthys stealer shellcode 4 IoCs
-
Rhadamanthys
Rhadamanthys is an info stealer written in C++ first seen in August 2022.
Processes
-
C:\Users\Admin\AppData\Local\Temp\7730ddf737f8a86606af30c6f23c6745299a34ca469bf4e2fec44c77f0831178.exe"C:\Users\Admin\AppData\Local\Temp\7730ddf737f8a86606af30c6f23c6745299a34ca469bf4e2fec44c77f0831178.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
184KB
-
Filesize
2.8MB
-
Filesize
184KB
-
Filesize
112KB
-
Filesize
112KB
-
Filesize
8KB
-
Filesize
112KB
-
Filesize
2.8MB
-
Filesize
112KB