Analysis
-
max time kernel
147s -
max time network
156s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
-
submitted
08-05-2023 18:27
General
-
Target
45d4fe22891d51f31bfa2f4c986802bc.exe
-
Size
411KB
-
MD5
45d4fe22891d51f31bfa2f4c986802bc
-
SHA1
13214cef92635200f74f68a35e91fcaa7d83fcdd
-
SHA256
3afa8aa568f26c6dcc9e6b32f376def4d0f54912ca431490e3b6558044fb2368
-
SHA512
5eacada96734fd14be5a85532c9cc2d3c7a8934f202afb7001a4309b3df1002475dcf978dfc1594f137dc67ffa640208260f7524023b9fe9c235ff2ec820d676
-
SSDEEP
6144:w+6NrfXS17AktlYEk+fySN4nan2o0wVr920GmowUO:x6NrfUtlvk+qSNQo1z20Gml
Score
10/10
Malware Config
Extracted
Family
rhadamanthys
C2
http://179.43.142.201/img/favicon.png
Signatures
-
Detect rhadamanthys stealer shellcode 4 IoCs
-
Rhadamanthys
Rhadamanthys is an info stealer written in C++ first seen in August 2022.
Processes
-
C:\Users\Admin\AppData\Local\Temp\45d4fe22891d51f31bfa2f4c986802bc.exe"C:\Users\Admin\AppData\Local\Temp\45d4fe22891d51f31bfa2f4c986802bc.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
184KB
-
Filesize
2.9MB
-
Filesize
112KB
-
Filesize
112KB
-
Filesize
8KB
-
Filesize
112KB
-
Filesize
2.9MB
-
Filesize
112KB