Analysis
-
max time kernel
150s -
max time network
147s -
platform
windows7_x64 -
resource
win7-20230220-en -
resource tags
-
submitted
05-05-2023 18:34
General
-
Target
8364d7674e5a8a8f9412f00ec862e7f91bfcb60fb9e567595f413b5e6704577e.exe
-
Size
368KB
-
MD5
2a33a553561a087bf533ab90fe85d897
-
SHA1
5603a199ff14817cfa3cb21c32bc5e775dcb2414
-
SHA256
8364d7674e5a8a8f9412f00ec862e7f91bfcb60fb9e567595f413b5e6704577e
-
SHA512
300b30a401c4a169cc7af393009bf3a1f40c5b8b6216f5274233f0b837c27e76851c7d4a7c61df353075fd04b61a5da6c18d9c5f34d6a7248f153ec2696244ca
-
SSDEEP
3072:Yu/GBnvEbvMqpaH3aSLbW123OxUR391gcoF3zLP4+K5TaDTFhrRck+:F/GerJaHrbf//1ghPpoaFb+
Score
10/10
Malware Config
Extracted
Family
rhadamanthys
C2
http://179.43.142.201/img/favicon.png
Signatures
-
Detect rhadamanthys stealer shellcode 4 IoCs
-
Rhadamanthys
Rhadamanthys is an info stealer written in C++ first seen in August 2022.
Processes
-
C:\Users\Admin\AppData\Local\Temp\8364d7674e5a8a8f9412f00ec862e7f91bfcb60fb9e567595f413b5e6704577e.exe"C:\Users\Admin\AppData\Local\Temp\8364d7674e5a8a8f9412f00ec862e7f91bfcb60fb9e567595f413b5e6704577e.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
184KB
-
Filesize
444KB
-
Filesize
112KB
-
Filesize
112KB
-
Filesize
4KB
-
Filesize
112KB
-
Filesize
444KB
-
Filesize
112KB