Analysis
-
max time kernel
206s -
max time network
212s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
-
submitted
07-05-2023 05:41
General
-
Target
ee692a6bade4d08fa2c9ccbcf1e812ab20685a99105bb3af06f6767854a76831.exe
-
Size
374KB
-
MD5
d1e8b256605c4f1595c38209a8c7bdf5
-
SHA1
30077823b8bbaf9f149509e89b4be09033702122
-
SHA256
ee692a6bade4d08fa2c9ccbcf1e812ab20685a99105bb3af06f6767854a76831
-
SHA512
d3d2289a37cf9b41b5bcf786f8e037bf571690e1cacab580307ed262278af4c13c2c019f2c3abfe971498d4eaf40c647e6aaceae1d89fdceb3ad2de16ee15f10
-
SSDEEP
6144:ZbT7t9LXAZJE8kGTQTnJrBGUb2kPEMTAssdxSZ:ZPrkZJYsOJ9P28XsdAZ
Score
10/10
Malware Config
Extracted
Family
rhadamanthys
C2
http://179.43.142.201/img/favicon.png
Signatures
-
Detect rhadamanthys stealer shellcode 4 IoCs
-
Rhadamanthys
Rhadamanthys is an info stealer written in C++ first seen in August 2022.
Processes
-
C:\Users\Admin\AppData\Local\Temp\ee692a6bade4d08fa2c9ccbcf1e812ab20685a99105bb3af06f6767854a76831.exe"C:\Users\Admin\AppData\Local\Temp\ee692a6bade4d08fa2c9ccbcf1e812ab20685a99105bb3af06f6767854a76831.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
184KB
-
Filesize
3.0MB
-
Filesize
3.0MB
-
Filesize
112KB
-
Filesize
112KB
-
Filesize
104KB
-
Filesize
3.0MB
-
Filesize
112KB
-
Filesize
112KB
-
Filesize
104KB