Analysis
-
max time kernel
152s -
max time network
167s -
platform
windows7_x64 -
resource
win7-20230220-en -
resource tags
-
submitted
05-05-2023 20:24
General
-
Target
ef4a67b340f9516a6c0522fb3ea6d3ce.exe
-
Size
354KB
-
MD5
ef4a67b340f9516a6c0522fb3ea6d3ce
-
SHA1
51a17cd3e3a45456c91cf6d7245ecfc7b7579c48
-
SHA256
9965b1d2226f47e2a8387830b2773ce026f41d202f0dab87a782158378c5c13e
-
SHA512
ac9d35b76b991e90b34b0651acda65b18579868138efb4a98676869109465556f0712b157e8bbe5971cfafdf09e2d4340d9386a7eee6c6f7e4ad3bf865f78956
-
SSDEEP
6144:wLwh55Mc5K05Uquzpj/COBLPzovi1dNSlU1g:Wwh5u2KUUVr7BX/1dN
Score
10/10
Malware Config
Extracted
Family
rhadamanthys
C2
http://179.43.142.201/img/favicon.png
Signatures
-
Detect rhadamanthys stealer shellcode 4 IoCs
-
Rhadamanthys
Rhadamanthys is an info stealer written in C++ first seen in August 2022.
Processes
-
C:\Users\Admin\AppData\Local\Temp\ef4a67b340f9516a6c0522fb3ea6d3ce.exe"C:\Users\Admin\AppData\Local\Temp\ef4a67b340f9516a6c0522fb3ea6d3ce.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
184KB
-
Filesize
432KB
-
Filesize
112KB
-
Filesize
432KB
-
Filesize
4KB
-
Filesize
112KB
-
Filesize
112KB
-
Filesize
112KB