Analysis
-
max time kernel
142s -
max time network
160s -
platform
windows7_x64 -
resource
win7-20230220-en -
resource tags
-
submitted
07-05-2023 09:34
General
-
Target
05c7aef3bfef4d322efbca5c0cd94669.exe
-
Size
370KB
-
MD5
05c7aef3bfef4d322efbca5c0cd94669
-
SHA1
0f1f6ed446e23551c38db12a5d61a81fe9329242
-
SHA256
3b33d9480f3dcbcbcf663c6c66acb149ac118cd8cbef1a2603715b9df6b21551
-
SHA512
7763c6ad293d6a4b9656cc4b68b6ace5dd55cc79f8c788907a86253b5b70d312e60ef443874a6c25c2f74c3a048300bf348599f0d2105f36f43d65be5fe6e808
-
SSDEEP
6144:stCzj7OQfLG0yRGR8uLDa9PewOUrk8kIinVHuxsZWL:Ss7OQfLcGR8UGdHFiH6TL
Score
10/10
Malware Config
Extracted
Family
rhadamanthys
C2
http://179.43.142.201/img/favicon.png
Signatures
-
Detect rhadamanthys stealer shellcode 5 IoCs
-
Rhadamanthys
Rhadamanthys is an info stealer written in C++ first seen in August 2022.
Processes
-
C:\Users\Admin\AppData\Local\Temp\05c7aef3bfef4d322efbca5c0cd94669.exe"C:\Users\Admin\AppData\Local\Temp\05c7aef3bfef4d322efbca5c0cd94669.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
184KB
-
Filesize
2.9MB
-
Filesize
112KB
-
Filesize
112KB
-
Filesize
112KB
-
Filesize
112KB
-
Filesize
2.9MB
-
Filesize
112KB