Analysis
-
max time kernel
151s -
max time network
155s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
-
submitted
05-05-2023 18:16
General
-
Target
2d4b3e080a3dd48ffc9d1b53778ce99a9a948a9bf2ba88f774350d03cfa09af9.exe
-
Size
304KB
-
MD5
d23904f66350ed0b99e6db530b0a95dc
-
SHA1
86206933a01f0d931103152c75594fc18edf9146
-
SHA256
2d4b3e080a3dd48ffc9d1b53778ce99a9a948a9bf2ba88f774350d03cfa09af9
-
SHA512
4a0763636f2c919027bf536115e3517343fface868f94aa2d5c8f550aadf738685c2ace7f688db7a5d7e3706ee3819000f7de43e13af2917f02f6b9d32e6755d
-
SSDEEP
6144:+PfTy6xjFsD/pAPBSOZBh7yOgrtJEhjy:R6xxsD/pAZSsBh78tJEhj
Score
10/10
Malware Config
Extracted
Family
rhadamanthys
C2
http://179.43.142.201/img/favicon.png
Signatures
-
Detect rhadamanthys stealer shellcode 4 IoCs
-
Rhadamanthys
Rhadamanthys is an info stealer written in C++ first seen in August 2022.
Processes
-
C:\Users\Admin\AppData\Local\Temp\2d4b3e080a3dd48ffc9d1b53778ce99a9a948a9bf2ba88f774350d03cfa09af9.exe"C:\Users\Admin\AppData\Local\Temp\2d4b3e080a3dd48ffc9d1b53778ce99a9a948a9bf2ba88f774350d03cfa09af9.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
184KB
-
Filesize
2.8MB
-
Filesize
112KB
-
Filesize
112KB
-
Filesize
8KB
-
Filesize
112KB
-
Filesize
2.8MB
-
Filesize
112KB