Analysis
-
max time kernel
143s -
max time network
162s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
-
submitted
05-05-2023 18:10
General
-
Target
d668246d8d9414c778f83f8f15d2ad68849c4b736d0cf65e126ffc7a7a27377f.exe
-
Size
410KB
-
MD5
151fb5d2362e854d6b2cf87a31fdd101
-
SHA1
12e1f114ddfc567c2718a7283f09f2b5291faf88
-
SHA256
d668246d8d9414c778f83f8f15d2ad68849c4b736d0cf65e126ffc7a7a27377f
-
SHA512
ca7b106393c63b202505c10695fed8330060613cf0c62a7b3dc819fd95af4464609a85e2af3cadf1314a917f65de02fbcd81a991100d67e9a1e0bfa8e885c622
-
SSDEEP
6144:eB/LoBCFoHjL5xRPpe31K1UyuWkHOM8gOh9qLiGPfqb:eB/cBCFoD9zxe3k1UyuWkHOdaGGPo
Score
10/10
Malware Config
Extracted
Family
rhadamanthys
C2
http://179.43.142.201/img/favicon.png
Signatures
-
Detect rhadamanthys stealer shellcode 4 IoCs
-
Rhadamanthys
Rhadamanthys is an info stealer written in C++ first seen in August 2022.
Processes
-
C:\Users\Admin\AppData\Local\Temp\d668246d8d9414c778f83f8f15d2ad68849c4b736d0cf65e126ffc7a7a27377f.exe"C:\Users\Admin\AppData\Local\Temp\d668246d8d9414c778f83f8f15d2ad68849c4b736d0cf65e126ffc7a7a27377f.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
184KB
-
Filesize
4.0MB
-
Filesize
112KB
-
Filesize
112KB
-
Filesize
104KB
-
Filesize
4.0MB
-
Filesize
112KB
-
Filesize
104KB