Analysis
-
max time kernel
144s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
-
submitted
05-05-2023 12:32
General
-
Target
52f226ac562447c57026be0ba4742ae8.exe
-
Size
372KB
-
MD5
52f226ac562447c57026be0ba4742ae8
-
SHA1
387bbdf31696291f5e8f03df3a486a1291140b17
-
SHA256
66ce76b202c16af5a50388acb85fdd4db54ab5fe5da9dcf92274b7bb5596cf10
-
SHA512
f6f17a83a1f765b87dbde7035592b31b7a63620c212942d3518e22233f5e0afccf3c27ca283e49090cd8809c86b61c7591323ca5cfa69198ab674a0e7cd8234b
-
SSDEEP
6144:/LWmicwKpQ3RdQGgZ3ENJcCCYzb0KpqCv41Ut:EcLgRd6qI1wb0BCvee
Score
10/10
Malware Config
Extracted
Family
rhadamanthys
C2
http://179.43.142.201/img/favicon.png
Signatures
-
Detect rhadamanthys stealer shellcode 4 IoCs
-
Rhadamanthys
Rhadamanthys is an info stealer written in C++ first seen in August 2022.
Processes
-
C:\Users\Admin\AppData\Local\Temp\52f226ac562447c57026be0ba4742ae8.exe"C:\Users\Admin\AppData\Local\Temp\52f226ac562447c57026be0ba4742ae8.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
184KB
-
Filesize
3.0MB
-
Filesize
112KB
-
Filesize
8KB
-
Filesize
112KB
-
Filesize
112KB
-
Filesize
3.0MB
-
Filesize
112KB