Analysis
-
max time kernel
150s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
-
submitted
04-05-2023 23:22
General
-
Target
34fb6c1f209a814f9d0c3c169dad593eeb08043678c4fe2fb84cfc045da74144.exe
-
Size
372KB
-
MD5
128c7ac72a52ebd1b2b33ac01d4d3462
-
SHA1
d97aa9998ca53e748e391abd0d0ffcc15c9ed21d
-
SHA256
34fb6c1f209a814f9d0c3c169dad593eeb08043678c4fe2fb84cfc045da74144
-
SHA512
2c9dfd72c37d91ce1293b457f3045f8291a5d5ee0d52302a058bd9052e86f1597d588e733a27fcddc63976dfed0900d6bd82a38f918b3ef470f347de77378af6
-
SSDEEP
3072:a5zAj97CBsDA11zTVqjh01k+Mm/T6tWemSO9i2cGvV/ITO38hd1VLm5RVsdFb4UE:c0MBs0V+6rMmrS842fVwTWVsUpJt
Score
10/10
Malware Config
Extracted
Family
rhadamanthys
C2
http://179.43.142.201/img/favicon.png
Signatures
-
Detect rhadamanthys stealer shellcode 4 IoCs
-
Rhadamanthys
Rhadamanthys is an info stealer written in C++ first seen in August 2022.
Processes
-
C:\Users\Admin\AppData\Local\Temp\34fb6c1f209a814f9d0c3c169dad593eeb08043678c4fe2fb84cfc045da74144.exe"C:\Users\Admin\AppData\Local\Temp\34fb6c1f209a814f9d0c3c169dad593eeb08043678c4fe2fb84cfc045da74144.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
184KB
-
Filesize
3.0MB
-
Filesize
184KB
-
Filesize
112KB
-
Filesize
112KB
-
Filesize
104KB
-
Filesize
112KB
-
Filesize
3.0MB
-
Filesize
112KB
-
Filesize
104KB