Analysis
-
max time kernel
120s -
max time network
126s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
27-10-2024 02:27
General
-
Target
677b8ff45ebb9486a99aecf8dd2b4b362010573ecc4d0d082eda6a36a7cab671.exe
-
Size
423KB
-
MD5
14988e9d35a0c92435297f7b2821dc60
-
SHA1
8c00da2ab4cf6da0c179f283eac0053231859f8c
-
SHA256
677b8ff45ebb9486a99aecf8dd2b4b362010573ecc4d0d082eda6a36a7cab671
-
SHA512
808401d94154a10a5e531b51af6f0a4876b9bbc0c288c33eb964101b30780766a4d7539cb146285d0bceddca4fbc77e072aab91224ab66c29c3feb04a13c2221
-
SSDEEP
6144:YAYM3ZEWqf/qwPF7LR5W8ZJ74zmRiOFBbMh9q/JSt3ChNeK06iiRzmi0F9:YWBqf/qq3R5W8ZB4zmRzbagsViRUF9
Score
10/10
Malware Config
Extracted
Family
rhadamanthys
C2
https://185.196.11.237:9697/f002171ab05c7/9xqdctgg.ir1fr
Signatures
-
Rhadamanthys
Rhadamanthys is an info stealer written in C++ first seen in August 2022.
-
Rhadamanthys family
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\677b8ff45ebb9486a99aecf8dd2b4b362010573ecc4d0d082eda6a36a7cab671.exe"C:\Users\Admin\AppData\Local\Temp\677b8ff45ebb9486a99aecf8dd2b4b362010573ecc4d0d082eda6a36a7cab671.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
504KB
-
Filesize
504KB