Analysis

  • max time kernel
    149s
  • max time network
    152s
  • platform
    windows7_x64
  • resource
    win7-20230621-en
  • resource tags

    arch:x64arch:x86image:win7-20230621-enlocale:en-usos:windows7-x64system
  • submitted
    30/06/2023, 12:21

General

  • Target

    LK2.exe

  • Size

    179KB

  • MD5

    27e018559bc0216c98fb188d3a3a8209

  • SHA1

    d0b477cf1d81182a2c0357432bd6b3e7a2bc43d4

  • SHA256

    563458d0d35d3e4a7809630809229fbe2977eabeb8639ceb677426308c156a3c

  • SHA512

    8ce3eccbef889189bebf0fd5cf36c257e4eba8344dc87d95d944718fd9bb16a833e951304420db0c46a9f4a8d050090b2758b709b5bacc47ed27b9a133b7e6be

  • SSDEEP

    3072:bwevYpKTDMDUqfuuE46lC4PQyfHU6Ig4cjnjFRpbll/XbqefxlS3ETgmBN8vqI5L:sevY8mlu3wB4HzlrzPOefxoEBK7

Score
10/10

Malware Config

Signatures

  • Detect rhadamanthys stealer shellcode 4 IoCs
  • Rhadamanthys

    Rhadamanthys is an info stealer written in C++ first seen in August 2022.

Processes

  • C:\Users\Admin\AppData\Local\Temp\LK2.exe
    "C:\Users\Admin\AppData\Local\Temp\LK2.exe"
    1⤵
      PID:1088

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1088-55-0x0000000000070000-0x000000000008C000-memory.dmp

      Filesize

      112KB

    • memory/1088-57-0x00000000000A0000-0x00000000000A1000-memory.dmp

      Filesize

      4KB

    • memory/1088-56-0x0000000000070000-0x000000000008C000-memory.dmp

      Filesize

      112KB

    • memory/1088-58-0x0000000000070000-0x000000000008C000-memory.dmp

      Filesize

      112KB

    • memory/1088-59-0x0000000000070000-0x000000000008C000-memory.dmp

      Filesize

      112KB