Analysis
-
max time kernel
250s -
max time network
318s -
platform
windows10-2004_x64 -
resource
win10v2004-20230221-en -
resource tags
-
submitted
07-05-2023 09:34
General
-
Target
08519d442427ddc963297f8424d8a07b.exe
-
Size
370KB
-
MD5
08519d442427ddc963297f8424d8a07b
-
SHA1
28bc9f1191e9b03b85ccbce6a1984d957405499b
-
SHA256
cfbb22ccceaa89c67a1139e72f65b1139c962ff4b8f6960389a58c5844d8e9dc
-
SHA512
726f4191e2de39c0bc8d9410921d33b71f2c75e1ee172e0da38e862050073c4ec47ea8168e4bf72eb5a5447057f5257f23f7217776b17b776fa0c78e632f38fd
-
SSDEEP
6144:3J+Zbjc2uQqCEJfzABdBtWtILy5HfOXghTGgsqWL:Zw/c2uQqjzUVgIu5H2XgMpPL
Score
10/10
Malware Config
Extracted
Family
rhadamanthys
C2
http://179.43.142.201/img/favicon.png
Signatures
-
Detect rhadamanthys stealer shellcode 3 IoCs
-
Rhadamanthys
Rhadamanthys is an info stealer written in C++ first seen in August 2022.
Processes
-
C:\Users\Admin\AppData\Local\Temp\08519d442427ddc963297f8424d8a07b.exe"C:\Users\Admin\AppData\Local\Temp\08519d442427ddc963297f8424d8a07b.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
184KB
-
Filesize
2.9MB
-
Filesize
2.9MB
-
Filesize
112KB
-
Filesize
2.9MB
-
Filesize
112KB
-
Filesize
8KB
-
Filesize
112KB