Analysis
-
max time kernel
149s -
max time network
153s -
platform
windows7_x64 -
resource
win7-20230220-en -
resource tags
-
submitted
05/05/2023, 19:31
General
-
Target
c691b5da782e10cdf29ed64c972c6472f9aa969dddab0ae3f6a9597316114148.exe
-
Size
411KB
-
MD5
4f4268a6be19e6e43e2ad1a96a97d8a3
-
SHA1
8f41c16ddd01774f60c91d2813716a3cfb6b6ca8
-
SHA256
c691b5da782e10cdf29ed64c972c6472f9aa969dddab0ae3f6a9597316114148
-
SHA512
152a4aea0ca31d09277c46c61f62f82f56e791607b2cdd3e670041219b2177825dc9030b475e940bd21caeb38f03cf5402327092c3241eb3e3bc57ec157d439c
-
SSDEEP
6144:9rJm9GKTFBzxUclo1l8K/wZY5qESQ7b0bRNLKrucMqO:9rM0KTmclUlt/hL30bRldN
Score
10/10
Malware Config
Extracted
Family
rhadamanthys
C2
http://179.43.142.201/img/favicon.png
Signatures
-
Detect rhadamanthys stealer shellcode 4 IoCs
-
Rhadamanthys
Rhadamanthys is an info stealer written in C++ first seen in August 2022.
Processes
-
C:\Users\Admin\AppData\Local\Temp\c691b5da782e10cdf29ed64c972c6472f9aa969dddab0ae3f6a9597316114148.exe"C:\Users\Admin\AppData\Local\Temp\c691b5da782e10cdf29ed64c972c6472f9aa969dddab0ae3f6a9597316114148.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
184KB
-
Filesize
4.0MB
-
Filesize
112KB
-
Filesize
4KB
-
Filesize
112KB
-
Filesize
112KB
-
Filesize
4.0MB
-
Filesize
112KB