Analysis
-
max time kernel
153s -
max time network
150s -
platform
windows7_x64 -
resource
win7-20230220-en -
resource tags
-
submitted
05-05-2023 18:19
General
-
Target
3a616eddf8c7a237bce10b850668c702491040621e7bb4990edee13f3011a78d.exe
-
Size
365KB
-
MD5
665d564c8829450addeff530b6db9099
-
SHA1
50ad362d7fd8284b87c69b4550e0a41b91bbeaf7
-
SHA256
3a616eddf8c7a237bce10b850668c702491040621e7bb4990edee13f3011a78d
-
SHA512
9c4f58b28ff3a0ee161f427e622a7d069f8d005e071eb64f3baf8ce26ecbcfbf58a238b9defd5d69b437abec612c6e9cfddbf730addfea377805d5ed4d18214a
-
SSDEEP
3072:iijyNnzEEL/ur/+rpGEu47LbXWLESlIVZOyq5NGBAUDkp9d97stERod5D6g/SoS8:ZjyeC/q+r8EHnrWLPIVTq9pj9edxX
Score
10/10
Malware Config
Extracted
Family
rhadamanthys
C2
http://179.43.142.201/img/favicon.png
Signatures
-
Detect rhadamanthys stealer shellcode 4 IoCs
-
Rhadamanthys
Rhadamanthys is an info stealer written in C++ first seen in August 2022.
Processes
-
C:\Users\Admin\AppData\Local\Temp\3a616eddf8c7a237bce10b850668c702491040621e7bb4990edee13f3011a78d.exe"C:\Users\Admin\AppData\Local\Temp\3a616eddf8c7a237bce10b850668c702491040621e7bb4990edee13f3011a78d.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
184KB
-
Filesize
6.4MB
-
Filesize
112KB
-
Filesize
4KB
-
Filesize
112KB
-
Filesize
112KB
-
Filesize
6.4MB
-
Filesize
112KB