Analysis
-
max time kernel
149s -
max time network
166s -
platform
windows7_x64 -
resource
win7-20230220-en -
resource tags
-
submitted
05-05-2023 18:57
General
-
Target
ad4dcdd75adfe13e5c94820a06593c6ad7bc913963024cc9f4412360a3015303.exe
-
Size
418KB
-
MD5
b496ac6d7f9099a8dc28a4df42501867
-
SHA1
4fd4e54d50056032b6b34572b6dda35d9987bd11
-
SHA256
ad4dcdd75adfe13e5c94820a06593c6ad7bc913963024cc9f4412360a3015303
-
SHA512
1c348e65050124fa8dee3ace7942b1c79c9612f63c37e82d21749593adaffda0a9ec9038e0fec0109552570b0a6b0028ca0278c62a64bfba6c5c33ae9ab2d722
-
SSDEEP
6144:sZYbmIsSZIZE5ebBCjkYV17nwU0qJo11ZIyxySYjBW:UYyIsSZafbILVdwQajZxUScW
Score
10/10
Malware Config
Extracted
Family
rhadamanthys
C2
http://179.43.142.201/img/favicon.png
Signatures
-
Detect rhadamanthys stealer shellcode 4 IoCs
-
Rhadamanthys
Rhadamanthys is an info stealer written in C++ first seen in August 2022.
Processes
-
C:\Users\Admin\AppData\Local\Temp\ad4dcdd75adfe13e5c94820a06593c6ad7bc913963024cc9f4412360a3015303.exe"C:\Users\Admin\AppData\Local\Temp\ad4dcdd75adfe13e5c94820a06593c6ad7bc913963024cc9f4412360a3015303.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
184KB
-
Filesize
4.1MB
-
Filesize
184KB
-
Filesize
112KB
-
Filesize
4KB
-
Filesize
112KB
-
Filesize
4.1MB
-
Filesize
112KB
-
Filesize
112KB