Analysis
-
max time kernel
146s -
max time network
154s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
-
submitted
07-05-2023 09:34
General
-
Target
0bfb4ed2d6b6c8554bb4e36f4b453069.exe
-
Size
365KB
-
MD5
0bfb4ed2d6b6c8554bb4e36f4b453069
-
SHA1
d49b9434ddcc9fb42badb227589e43eb51509fb5
-
SHA256
fe652f4fe8a4ff5df293201042d1ff0206e1e34541a5ada6741c75be45f88f41
-
SHA512
445b6932ea3c2a6cbd745a5cc566c310bfd9a9a6c1afb54d4854d749c7aa0be7d7a4abe8ade9fbf8190a9e573f97292df33b4dd179bee3ed695432af5508bddc
-
SSDEEP
6144:ZS+GjT7QYrYIog9dXaCjfVH8T32SG4kiawbdNMKL:MhT7QYrBRPTeySaibdNNL
Score
10/10
Malware Config
Extracted
Family
rhadamanthys
C2
http://179.43.142.201/img/favicon.png
Signatures
-
Detect rhadamanthys stealer shellcode 4 IoCs
-
Rhadamanthys
Rhadamanthys is an info stealer written in C++ first seen in August 2022.
Processes
-
C:\Users\Admin\AppData\Local\Temp\0bfb4ed2d6b6c8554bb4e36f4b453069.exe"C:\Users\Admin\AppData\Local\Temp\0bfb4ed2d6b6c8554bb4e36f4b453069.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
184KB
-
Filesize
2.8MB
-
Filesize
112KB
-
Filesize
112KB
-
Filesize
8KB
-
Filesize
112KB
-
Filesize
2.8MB
-
Filesize
112KB