Analysis
-
max time kernel
150s -
max time network
153s -
platform
windows7_x64 -
resource
win7-20230220-en -
resource tags
-
submitted
05-05-2023 11:57
General
-
Target
cc.exe
-
Size
335KB
-
MD5
0dcff6fc30ddb8ff44765764d8a9afe3
-
SHA1
4957854897902579ac211fa57c8d9186d7982f97
-
SHA256
b717f6d0f136ca9466f792f72ab97cb656c796a71f4c8bfa93f680235a505daa
-
SHA512
fbe82c9bce46cfa8f76728d285a6831481a48360c7df93d8f82228ebf01a78ecc5de0ac98387c2f79cfdd1a684397e4483b9958627fe14cf41398d97b3f1f84d
-
SSDEEP
6144:+7A8FTy4XiBsTJcJb+H/T5Aqf6scVMWq9rSjNi7Nol:YA2Ty4X1VcJeP7cix17NC
Score
10/10
Malware Config
Extracted
Family
rhadamanthys
C2
http://179.43.142.201/img/favicon.png
Signatures
-
Detect rhadamanthys stealer shellcode 4 IoCs
-
Rhadamanthys
Rhadamanthys is an info stealer written in C++ first seen in August 2022.
Processes
-
C:\Users\Admin\AppData\Local\Temp\cc.exe"C:\Users\Admin\AppData\Local\Temp\cc.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
184KB
-
Filesize
2.8MB
-
Filesize
112KB
-
Filesize
112KB
-
Filesize
4KB
-
Filesize
112KB
-
Filesize
2.8MB
-
Filesize
112KB