Analysis
-
max time kernel
119s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20241010-en -
resource tags
-
submitted
10-12-2024 18:56
General
-
Target
13ae645002224daa84b856fa7d53f3220392d6e284c98f3d8c7f310918dc87bc.exe
-
Size
423KB
-
MD5
fd1ac3296444a3696dc4fc1373c7bca7
-
SHA1
93b2df42be82d79455dc1c0f0f850656ddd7e57a
-
SHA256
13ae645002224daa84b856fa7d53f3220392d6e284c98f3d8c7f310918dc87bc
-
SHA512
4bb9491b93b0024f8d22410af8b0e1469e1b09bb63727e8b74e3c3442a169311c7005508a26e38c41d0c8f1327e9f5f9003a7de13d7ba2ead6fb42487eb08c92
-
SSDEEP
6144:YAYM3ZEWqf/qwPF7LR5W8ZJ74zmRiOFBbMh9q/JS63ChNeK06iiRzmi0F9:YWBqf/qq3R5W8ZB4zmRzbatsViRUF9
Score
10/10
Malware Config
Extracted
Family
rhadamanthys
C2
https://83.217.208.134/9fcc2685c3ccafd/pa8qm8h9.hc0r5
Signatures
-
Rhadamanthys
Rhadamanthys is an info stealer written in C++ first seen in August 2022.
-
Rhadamanthys family
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\13ae645002224daa84b856fa7d53f3220392d6e284c98f3d8c7f310918dc87bc.exe"C:\Users\Admin\AppData\Local\Temp\13ae645002224daa84b856fa7d53f3220392d6e284c98f3d8c7f310918dc87bc.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
504KB
-
Filesize
504KB