Analysis
-
max time kernel
150s -
max time network
153s -
platform
windows7_x64 -
resource
win7-20230220-en -
resource tags
-
submitted
05-05-2023 18:18
General
-
Target
37523e38323e5e0ada3c93f23d0e908b852d86d99bf24bd0afb6000bb054a4aa.exe
-
Size
304KB
-
MD5
f591a307be8c7d9742579bb16e6b15e0
-
SHA1
6e42d56ebe649abf12caebf8e2cabbe0bf301e0a
-
SHA256
37523e38323e5e0ada3c93f23d0e908b852d86d99bf24bd0afb6000bb054a4aa
-
SHA512
c0185357e473d56ad8cb78cc932c3e42623cf04e9443e2a24b4e1be1502c3694de3ae0b3bc3265a8b528d46962ed2ac343aa22d4b8c179b960a92c876f879236
-
SSDEEP
6144:WbZ3J85rTzeazgca4zIz//5IdX50blF6zltp6diaMcRSslWo:kZ3JCrTzey0z3eEhWtpciavRt
Score
10/10
Malware Config
Extracted
Family
rhadamanthys
C2
http://179.43.142.201/img/favicon.png
Signatures
-
Detect rhadamanthys stealer shellcode 4 IoCs
-
Rhadamanthys
Rhadamanthys is an info stealer written in C++ first seen in August 2022.
Processes
-
C:\Users\Admin\AppData\Local\Temp\37523e38323e5e0ada3c93f23d0e908b852d86d99bf24bd0afb6000bb054a4aa.exe"C:\Users\Admin\AppData\Local\Temp\37523e38323e5e0ada3c93f23d0e908b852d86d99bf24bd0afb6000bb054a4aa.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
184KB
-
Filesize
2.8MB
-
Filesize
4KB
-
Filesize
112KB
-
Filesize
112KB
-
Filesize
112KB
-
Filesize
2.8MB
-
Filesize
112KB