Analysis
-
max time kernel
117s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
15-02-2025 05:06
General
-
Target
fcfb94820cb2abbe80bdb491c98ede8e6cfa294fa8faf9bea09a9b9ceae35bf3.exe
-
Size
439KB
-
MD5
011827ebdf113755102a47987b718587
-
SHA1
d8d946a6df1649972694312e299aeff3cf2afb9b
-
SHA256
fcfb94820cb2abbe80bdb491c98ede8e6cfa294fa8faf9bea09a9b9ceae35bf3
-
SHA512
0252ddae07e7687966fd21cf453d1328e7d1c92b1cb0f7106cdb9565c1945f599b8bf5e460fc163339931a3c3b73bdd467c3d1d92649ef614b0e757a8cf26a3a
-
SSDEEP
12288:1O7k28xC7HMDVBjfbL5S6IZ7OGQN/RutyU3ivG/Zt9:+OS6IZ7QN/R8yoaG/b
Score
10/10
Malware Config
Signatures
-
Detects Rhadamanthys payload 2 IoCs
-
Rhadamanthys
Rhadamanthys is an info stealer written in C++ first seen in August 2022.
-
Rhadamanthys family
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\fcfb94820cb2abbe80bdb491c98ede8e6cfa294fa8faf9bea09a9b9ceae35bf3.exe"C:\Users\Admin\AppData\Local\Temp\fcfb94820cb2abbe80bdb491c98ede8e6cfa294fa8faf9bea09a9b9ceae35bf3.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
516KB
-
Filesize
4.0MB
-
Filesize
516KB
-
Filesize
4.0MB
-
Filesize
4.0MB
-
Filesize
4.0MB