Analysis
-
max time kernel
11s -
max time network
15s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
21-11-2024 10:24
General
-
Target
Rhadamanthys.exe
-
Size
185KB
-
MD5
89ec4405e9b2cab987f2e4f7e4b1666e
-
SHA1
ec48082347136444540c9b8ba4eabcfdc526868c
-
SHA256
af04ee03d69a7962fa5350d0df00fafc4ae85a07dff32f99f0d8d63900a47466
-
SHA512
6f95787d6eee37207a97dd5d0ed09d6d09409d7861630da9e932cee7bef31ae51c805d1b0a1d20e13293967a007bba4554def4e34fe4ac55d57b3d9e574f3cac
-
SSDEEP
3072:6rtHTIN7WXsrbiUSAY4pf7JCIaxIJlShDGbm/5uDGWqB2l7:6ZzXcrjztp7JliNum/5
Score
10/10
Malware Config
Signatures
-
Detect rhadamanthys stealer shellcode 2 IoCs
-
Rhadamanthys
Rhadamanthys is an info stealer written in C++ first seen in August 2022.
-
Rhadamanthys family
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\Rhadamanthys.exe"C:\Users\Admin\AppData\Local\Temp\Rhadamanthys.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
104KB
-
Filesize
116KB
-
Filesize
116KB