General

  • Target

    6551ea66aaf5399873fc220536f5e10db430cf16d0bcb78b30fdecf4dc929c7f

  • Size

    287KB

  • Sample

    221217-q72c2agg24

  • MD5

    9f7956eeaac301c242c5a1888d2de2c7

  • SHA1

    4efb84f5551868dc8410f4174d9c9117a3c27690

  • SHA256

    6551ea66aaf5399873fc220536f5e10db430cf16d0bcb78b30fdecf4dc929c7f

  • SHA512

    926ac7ac1eb2a5f4f1ef681ee18be5dccb5b0ec597a513c200e688e87937b14e8479fcd9accb20d5f9f717f9bf97f50d97e8962fcb3aefb44148cdda2ceb9506

  • SSDEEP

    6144:7Z5BSLLGyfX/8QZnp8jJwnW+jgxia0Ng3CyfU0VB:F5GKyfHZyjeW+0xia0iStO

Score
10/10

Malware Config

Targets

    • Target

      6551ea66aaf5399873fc220536f5e10db430cf16d0bcb78b30fdecf4dc929c7f

    • Size

      287KB

    • MD5

      9f7956eeaac301c242c5a1888d2de2c7

    • SHA1

      4efb84f5551868dc8410f4174d9c9117a3c27690

    • SHA256

      6551ea66aaf5399873fc220536f5e10db430cf16d0bcb78b30fdecf4dc929c7f

    • SHA512

      926ac7ac1eb2a5f4f1ef681ee18be5dccb5b0ec597a513c200e688e87937b14e8479fcd9accb20d5f9f717f9bf97f50d97e8962fcb3aefb44148cdda2ceb9506

    • SSDEEP

      6144:7Z5BSLLGyfX/8QZnp8jJwnW+jgxia0Ng3CyfU0VB:F5GKyfHZyjeW+0xia0iStO

    Score
    10/10
    • Detect rhadamanthys stealer shellcode

    • Rhadamanthys

      Rhadamanthys is an info stealer written in C++ first seen in August 2022.

    • Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Matrix

Tasks