Analysis
-
max time kernel
149s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
06-02-2025 06:31
General
-
Target
5558411f812462801b17e3142fb3f7c2259e45b0582638dd15d23f456f85fd4c.exe
-
Size
16.6MB
-
MD5
3cd92ded2a31e0f31cc0a8dd24b53ffb
-
SHA1
1e12c5fb9bc7b2b1f83cf1ebcaaac2637ff0e1ff
-
SHA256
5558411f812462801b17e3142fb3f7c2259e45b0582638dd15d23f456f85fd4c
-
SHA512
401c477071317e7e95fd93691f91b000a82acf04ab3b2921f71043731fd7761ea1ad7eb23128bb9d952c6b5d08172bb28c76ffaf5d55bcb284a14d6a9764a6b5
-
SSDEEP
393216:fF1mrniABfmkzPnWFVd/TBnjQsblFzt8c:fF3eekz/aBQsBFzn
Score
10/10
Malware Config
Signatures
-
Detects Rhadamanthys payload 2 IoCs
-
Rhadamanthys
Rhadamanthys is an info stealer written in C++ first seen in August 2022.
-
Rhadamanthys family
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\5558411f812462801b17e3142fb3f7c2259e45b0582638dd15d23f456f85fd4c.exe"C:\Users\Admin\AppData\Local\Temp\5558411f812462801b17e3142fb3f7c2259e45b0582638dd15d23f456f85fd4c.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
516KB
-
Filesize
4.0MB
-
Filesize
4.0MB
-
Filesize
4.0MB
-
Filesize
516KB