Analysis
-
max time kernel
144s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
-
submitted
06-05-2023 06:44
General
-
Target
69e5fbde26db525e6d78615559928ce402232e950955efb1b4476d84bc8104ba.exe
-
Size
364KB
-
MD5
ef678bfd78197b1e516d2163967c2112
-
SHA1
45ae3af34d368ec5388577a8c974b59cd1d67756
-
SHA256
69e5fbde26db525e6d78615559928ce402232e950955efb1b4476d84bc8104ba
-
SHA512
23399d6665dcdf24a8d86075dcd433fc5aaf6635b5f69c040831d17967611f6e45835402d1de6bb94f61447b0ca1cd06b2535fe574aef2c97f84ea4009b49a1f
-
SSDEEP
6144:rryloYE03wAyNsLdByj1P2ih/7Hz3aFTgn2hNKGJXiCPK:rrVYE0vyVpPHJTTeTjITCPK
Score
10/10
Malware Config
Extracted
Family
rhadamanthys
C2
http://179.43.142.201/img/favicon.png
Signatures
-
Detect rhadamanthys stealer shellcode 4 IoCs
-
Rhadamanthys
Rhadamanthys is an info stealer written in C++ first seen in August 2022.
Processes
-
C:\Users\Admin\AppData\Local\Temp\69e5fbde26db525e6d78615559928ce402232e950955efb1b4476d84bc8104ba.exe"C:\Users\Admin\AppData\Local\Temp\69e5fbde26db525e6d78615559928ce402232e950955efb1b4476d84bc8104ba.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
184KB
-
Filesize
2.8MB
-
Filesize
112KB
-
Filesize
112KB
-
Filesize
8KB
-
Filesize
112KB
-
Filesize
2.8MB
-
Filesize
112KB