Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
06-02-2025 06:19
General
-
Target
36bbc5fca6c7ebfe14b2bc077363a8173a5d87d203e2999a0c90f6fd31d6093b.exe
-
Size
16.6MB
-
MD5
fd75fb79c3ba7ef017a0923bd52a40a6
-
SHA1
f8a68a67e8adf1440f96d66596625d348b4779ca
-
SHA256
36bbc5fca6c7ebfe14b2bc077363a8173a5d87d203e2999a0c90f6fd31d6093b
-
SHA512
5778353562beffa31b279ccf58267ae913cd2ef21747d6f591fe9b813d5509fe178ee0d55511afb5d11f258cb55dda26727544e257f75329b058fe737961fa13
-
SSDEEP
393216:DIhF9UAH8iSIWkcyqNNwXD1UdcLoP7JFd5hqCXafT3MN1Mgjg:879UAcNgqNNwXDedcLop8Mbjg
Score
10/10
Malware Config
Signatures
-
Detects Rhadamanthys payload 2 IoCs
-
Rhadamanthys
Rhadamanthys is an info stealer written in C++ first seen in August 2022.
-
Rhadamanthys family
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\36bbc5fca6c7ebfe14b2bc077363a8173a5d87d203e2999a0c90f6fd31d6093b.exe"C:\Users\Admin\AppData\Local\Temp\36bbc5fca6c7ebfe14b2bc077363a8173a5d87d203e2999a0c90f6fd31d6093b.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
516KB
-
Filesize
516KB
-
Filesize
4.0MB
-
Filesize
4.0MB
-
Filesize
4.0MB
-
Filesize
4.0MB