Analysis
-
max time kernel
158s -
max time network
164s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
-
submitted
05-05-2023 18:16
General
-
Target
2e1f777b084fc1e18192d83a2bca4437854632cc65230b08281118ab12b060fc.exe
-
Size
312KB
-
MD5
9259185e93d0a020d53e5d34e5cd5194
-
SHA1
90651e927706d59b79171f10546bd58c1ddb45c4
-
SHA256
2e1f777b084fc1e18192d83a2bca4437854632cc65230b08281118ab12b060fc
-
SHA512
784a8c481f89741bc2b5b133dd066d331a5f8317d1ac49453b103773971e7529c5e34bec418eb602e8ae677bd4a0c5c2f83289631a85dce030a2ffdd2b2bc1fe
-
SSDEEP
6144:KBKwo+dnwN2QtOsC09HymmFpWFZq5fooVq2Tc:KBpoqnwN2QS09S9MZIfho2I
Score
10/10
Malware Config
Extracted
Family
rhadamanthys
C2
http://179.43.142.201/img/favicon.png
Signatures
-
Detect rhadamanthys stealer shellcode 4 IoCs
-
Rhadamanthys
Rhadamanthys is an info stealer written in C++ first seen in August 2022.
Processes
-
C:\Users\Admin\AppData\Local\Temp\2e1f777b084fc1e18192d83a2bca4437854632cc65230b08281118ab12b060fc.exe"C:\Users\Admin\AppData\Local\Temp\2e1f777b084fc1e18192d83a2bca4437854632cc65230b08281118ab12b060fc.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
184KB
-
Filesize
2.8MB
-
Filesize
184KB
-
Filesize
8KB
-
Filesize
112KB
-
Filesize
112KB
-
Filesize
112KB
-
Filesize
2.8MB
-
Filesize
112KB