Analysis
-
max time kernel
150s -
max time network
143s -
platform
windows7_x64 -
resource
win7-20230220-en -
resource tags
-
submitted
05-05-2023 12:29
General
-
Target
670a203a7df0a928e57047e895501a78.exe
-
Size
335KB
-
MD5
670a203a7df0a928e57047e895501a78
-
SHA1
8efa129a7cf8a34aabaaa41f1f4cb5996b3f75da
-
SHA256
0bb7a4e89ff0c6762fdac3b19a15b1b16efd6f063097c82dfce9642ccb0732e3
-
SHA512
c589e16ccb9caa4324e9f0675f50d9b703abefca1b1650dad3486ae320cbea1da5133676c838e4b070a34a9e9bc165d63d76e32f34946991cc5746f46d6a09ff
-
SSDEEP
6144:SI7XXJdlU5yEeLSgDzJQDzhfg6PqEDbCS8cu16tkNol:77nJdlUkEiDWDhgkCcavNC
Score
10/10
Malware Config
Extracted
Family
rhadamanthys
C2
http://179.43.142.201/img/favicon.png
Signatures
-
Detect rhadamanthys stealer shellcode 4 IoCs
-
Rhadamanthys
Rhadamanthys is an info stealer written in C++ first seen in August 2022.
Processes
-
C:\Users\Admin\AppData\Local\Temp\670a203a7df0a928e57047e895501a78.exe"C:\Users\Admin\AppData\Local\Temp\670a203a7df0a928e57047e895501a78.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
184KB
-
Filesize
2.8MB
-
Filesize
112KB
-
Filesize
4KB
-
Filesize
112KB
-
Filesize
112KB
-
Filesize
2.8MB
-
Filesize
112KB