Analysis
-
max time kernel
144s -
max time network
148s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
-
submitted
09/05/2023, 03:07
General
-
Target
653c12db63dc13521af00bac41d549d599d5705c81b8b8ee40988a4a0924eb22.exe
-
Size
405KB
-
MD5
ddf9984a27fa6a63ba3f584b05985d02
-
SHA1
42e1ea823f7e579d81a136b9deb010ca9541bdfb
-
SHA256
653c12db63dc13521af00bac41d549d599d5705c81b8b8ee40988a4a0924eb22
-
SHA512
fb241a3dce0ea2786d1c274ac699f7a0472593d2f35b0441c44602824a539a29a9018ba871946f90950a5150c16fe9bfacb2f54087d1a8cc69e90968426736cb
-
SSDEEP
6144:dWYgvcFmrATHQmgR1W6WrEH6+YheLzsPKqtEa:3gvsm+HRZ6WQHtYhWzsiLa
Score
10/10
Malware Config
Extracted
Family
rhadamanthys
C2
http://179.43.142.201/img/favicon.png
Signatures
-
Detect rhadamanthys stealer shellcode 4 IoCs
-
Rhadamanthys
Rhadamanthys is an info stealer written in C++ first seen in August 2022.
Processes
-
C:\Users\Admin\AppData\Local\Temp\653c12db63dc13521af00bac41d549d599d5705c81b8b8ee40988a4a0924eb22.exe"C:\Users\Admin\AppData\Local\Temp\653c12db63dc13521af00bac41d549d599d5705c81b8b8ee40988a4a0924eb22.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
184KB
-
Filesize
2.9MB
-
Filesize
112KB
-
Filesize
112KB
-
Filesize
8KB
-
Filesize
112KB
-
Filesize
2.9MB
-
Filesize
112KB