Analysis
-
max time kernel
184s -
max time network
189s -
platform
windows7_x64 -
resource
win7-20230220-en -
resource tags
-
submitted
05-05-2023 20:30
General
-
Target
f51a9c0e96f046edadc666cc17cad28c7b59ec956c431563dd95a5b44a9f3b1d.exe
-
Size
397KB
-
MD5
e9be00f5ab60d9b1071a24f2e134f752
-
SHA1
7dd1b2229a3daf96b34f960bfc877342611023f6
-
SHA256
f51a9c0e96f046edadc666cc17cad28c7b59ec956c431563dd95a5b44a9f3b1d
-
SHA512
a94f2f99300c13dd50e5377693fb10566a89e9c9e467be38f36b4f5744cf682aa827eff58642720395697d148d13092a2a2137e4e433c025eae59160e8c5dc80
-
SSDEEP
6144:+KMt52a0RYbwUikB+EcFZMrql6NquN6Lq1gzsqs:+KMzQYbwUikYEuOWx5LqIsD
Score
10/10
Malware Config
Extracted
Family
rhadamanthys
C2
http://179.43.142.201/img/favicon.png
Signatures
-
Detect rhadamanthys stealer shellcode 4 IoCs
-
Rhadamanthys
Rhadamanthys is an info stealer written in C++ first seen in August 2022.
Processes
-
C:\Users\Admin\AppData\Local\Temp\f51a9c0e96f046edadc666cc17cad28c7b59ec956c431563dd95a5b44a9f3b1d.exe"C:\Users\Admin\AppData\Local\Temp\f51a9c0e96f046edadc666cc17cad28c7b59ec956c431563dd95a5b44a9f3b1d.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
184KB
-
Filesize
4.0MB
-
Filesize
112KB
-
Filesize
4.0MB
-
Filesize
4KB
-
Filesize
112KB
-
Filesize
112KB
-
Filesize
112KB